Function at 0x140009810
Capabilities:
Capture network configuration via ipconfig
Delete file
Delete volume shadow copies
Execute command
Persist via windows service
Self delete
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0xbdc0]
mov eax, 0xbec0
call fcn.140116950
sub rsp, rax
mov rbx, rcx
mov byte [0x1401c0968], 1
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.sc_delete_vgc
lea rcx, [rbp + 0x40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x40]
call fcn.140001a58
lea rdx, str.sc_delete_vgk
lea rcx, [rbp + 0x60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60]
call fcn.140001a58
lea rdx, str._homedrive_Program_FilesRiotVanguard
lea rcx, [rbp + 0x80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp + 0x80]
call fcn.140001a58
lea rdx, str._homedrive_Program_FilesRiot_Vanguard
lea rcx, [rbp + 0xa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp + 0xa0]
call fcn.140001a58
lea rdx, str.taskkill__f__im_EpicGamesLauncher.exe
lea rcx, [rbp + 0xc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xc0]
call fcn.140001a58
lea rdx, str.taskkill__f__im_FortniteClient_Win64_Shipping.exe
lea rcx, [rbp + 0xe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xe0]
call fcn.140001a58
lea rdx, str.taskkill__f__im_OneDrive.exe
lea rcx, [rbp + 0x100]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x100]
call fcn.140001a58
lea rdx, str.sc_stop_HTTPDebuggerPro__nul_2_1
lea rcx, [rbp + 0x120]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x120]
call fcn.140001a58
lea rdx, str.sc_delete_HTTPDebuggerPro__nul_2_1
lea rcx, [rbp + 0x140]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x140]
call fcn.140001a58
lea rdx, str.sc_stop_BEService__nul_2_1
lea rcx, [rbp + 0x160]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x160]
call fcn.140001a58
lea rdx, str.sc_delete_BEService__nul_2_1
lea rcx, [rbp + 0x180]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x180]
call fcn.140001a58
lea rdx, str.sc_stop_BEDaisy__nul_2_1
lea rcx, [rbp + 0x1a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1a0]
call fcn.140001a58
lea rdx, str.sc_delete_BEDaisy__nul_2_1
lea rcx, [rbp + 0x1c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1c0]
call fcn.140001a58
lea rdx, str.sc_stop_EasyAntiCheat__nul_2_1
lea rcx, [rbp + 0x1e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1e0]
call fcn.140001a58
lea rdx, str.sc_stop_EasyAntiCheatSys__nul_2_1
lea rcx, [rbp + 0x200]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x200]
call fcn.140001a58
lea rdx, str.sc_delete_EasyAntiCheat__nul_2_1
lea rcx, [rbp + 0x220]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x220]
call fcn.140001a58
lea rdx, str.sc_delete_EasyAntiCheatSys__nul_2_1
lea rcx, [rbp + 0x240]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x240]
call fcn.140001a58
lea rdx, str.sc_stop_HTTPDebuggerPro__nul_2_1
lea rcx, [rbp + 0x260]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x260]
call fcn.140001a58
lea rdx, str.del__F__IM_C:WindowsCapcom.sys_2_1
lea rcx, [rbp + 0x280]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x280]
call fcn.140001a58
lea rdx, str.del__F__IM_del__f__temp__2_1
lea rcx, [rbp + 0x2a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2a0]
call fcn.140001a58
lea rdx, str.del__F__IM_D:_steamdepotcache_2_1
lea rcx, [rbp + 0x2c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2c0]
call fcn.140001a58
lea rdx, str.del__F__IM_C:Program_Files__x86_EasyAntiCheatEasyAntiCheat.exe_2_1
lea rcx, [rbp + 0x2e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2e0]
call fcn.140001a58
lea rdx, str.del__F__IM_C:Program_Files__x86_EasyAntiCheatEasyAntiCheat.sys_2_1
lea rcx, [rbp + 0x300]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x300]
call fcn.140001a58
lea rdx, str.del__F__IM_C:WindowsKsDumperDriver.sys_2_1
lea rcx, [rbp + 0x320]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x320]
call fcn.140001a58
lea rdx, str.del__F__IM_C:WindowsSystem32Capcom.sys_2_1
lea rcx, [rbp + 0x340]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x340]
call fcn.140001a58
lea rdx, str.del__F__IM_C:WindowsSystem32KsDumperDriver.sys_2_1
lea rcx, [rbp + 0x360]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x360]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTemp
lea rcx, [rbp + 0x380]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x380]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataRoamingEasyAntiCheat
lea rcx, [rbp + 0x3a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3a0]
call fcn.140001a58
lea rdx, str.taskkill__f__im_EpicGamesLauncher.exe
lea rcx, [rbp + 0x3c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3c0]
call fcn.140001a58
lea rdx, str.taskkill__f__im_FortniteClient_Win64_Shipping.exe
lea rcx, [rbp + 0x3e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3e0]
call fcn.140001a58
lea rdx, str.taskkill__f__im_OneDrive.exe
lea rcx, [rbp + 0x400]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x400]
call fcn.140001a58
lea rdx, str.rd__q__s__systemdrive__Recycle.Bin__nul_2_1
lea rcx, [rbp + 0x420]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x420]
call fcn.140001a58
lea rdx, str.rd__q__s_d:_Recycle.Bin__nul_2_1
lea rcx, [rbp + 0x440]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x440]
call fcn.140001a58
lea rdx, str.rd__q__s_e:_Recycle.Bin__nul_2_1
lea rcx, [rbp + 0x460]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x460]
call fcn.140001a58
lea rdx, str.rd__q__s_f:_Recycle.Bin__nul_2_1
lea rcx, [rbp + 0x480]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x480]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Windows_servicingInboxFodMetadataCache
lea rcx, [rbp + 0x4a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataRoamingMicrosoftWindowsCloudStore
lea rcx, [rbp + 0x4c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalFortniteGameSaved
lea rcx, [rbp + 0x4e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsExplorerIconCacheToDelete
lea rcx, [rbp + 0x500]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x500]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsINF
lea rcx, [rbp + 0x520]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x520]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramData_username_MicrosoftXboxLiveNSALCache
lea rcx, [rbp + 0x540]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x540]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsPrefetch
lea rcx, [rbp + 0x560]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x560]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalD3DSCache
lea rcx, [rbp + 0x580]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x580]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalCrashReportClient
lea rcx, [rbp + 0x5a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Windows_temp
lea rcx, [rbp + 0x5c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsLogs
lea rcx, [rbp + 0x5e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastore
lea rcx, [rbp + 0x600]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x600]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSoftwareDistributionDataStoreLogs
lea rcx, [rbp + 0x620]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x620]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsWERTemp
lea rcx, [rbp + 0x640]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x640]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalAMDDxCache
lea rcx, [rbp + 0x660]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x660]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsPrefetch
lea rcx, [rbp + 0x680]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x680]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataUSOSharedLogs
lea rcx, [rbp + 0x6a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h___a_:_a___q__systemdrive_Usersusername_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewy.
lea rcx, [rbp + 0x6c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h___a_:_a___q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCache.
lea rcx, [rbp + 0x6e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweAC
lea rcx, [rbp + 0x700]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x700]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweLocalCache
lea rcx, [rbp + 0x720]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x720]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings
lea rcx, [rbp + 0x740]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x740]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteEnginePlugins_
lea rcx, [rbp + 0x760]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x760]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePlugins_
lea rcx, [rbp + 0x780]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x780]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDir_
lea rcx, [rbp + 0x7a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalNVIDIA_Corporation_
lea rcx, [rbp + 0x7c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataRoamingEasyAntiCheat
lea rcx, [rbp + 0x7e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7e0]
call fcn.140001a58
lea rdx, str.del__f__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFiNetworksCache
lea rcx, [rbp + 0x800]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x800]
call fcn.140001a58
lea rdx, str.del__f__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFiRules
lea rcx, [rbp + 0x820]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x820]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsServiceProfilesNetworkServiceAppDataLocalMicrosoftWindowsDeliveryOptimizationCache
lea rcx, [rbp + 0x840]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x840]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTemp
lea rcx, [rbp + 0x860]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x860]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataRoamingMicrosoftWindowsCloudStore
lea rcx, [rbp + 0x880]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x880]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalFortniteGameSaved
lea rcx, [rbp + 0x8a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsINF
lea rcx, [rbp + 0x8c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramData_username_MicrosoftXboxLive
lea rcx, [rbp + 0x8e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_UsersPublicDocuments
lea rcx, [rbp + 0x900]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x900]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsPrefetch
lea rcx, [rbp + 0x920]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x920]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalD3DSCache
lea rcx, [rbp + 0x940]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x940]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalCrashReportClient
lea rcx, [rbp + 0x960]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x960]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Windows_temp
lea rcx, [rbp + 0x980]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x980]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastore
lea rcx, [rbp + 0x9a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSoftwareDistributionDataStoreLogs
lea rcx, [rbp + 0x9c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsWERTemp
lea rcx, [rbp + 0x9e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalAMDDxCache
lea rcx, [rbp + 0xa00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalNVIDIA_Corporation
lea rcx, [rbp + 0xa20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsPrefetch
lea rcx, [rbp + 0xa40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h___a_:_a___q__systemdrive_Usersusername_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewy.
lea rcx, [rbp + 0xa60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h___a_:_a___q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCache.
lea rcx, [rbp + 0xa80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h___a_:_a___q__systemdrive_Users_username_AppDataLocalMicrosoftXboxLive.
lea rcx, [rbp + 0xaa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaa0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweAC
lea rcx, [rbp + 0xac0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xac0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweLocalCache
lea rcx, [rbp + 0xae0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xae0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings
lea rcx, [rbp + 0xb00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb00]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteEnginePlugins_
lea rcx, [rbp + 0xb20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb20]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePlugins_
lea rcx, [rbp + 0xb40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb40]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDir_
lea rcx, [rbp + 0xb60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb60]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalNVIDIA_Corporation_
lea rcx, [rbp + 0xb80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataRoamingEasyAntiCheat
lea rcx, [rbp + 0xba0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xba0]
call fcn.140001a58
lea rdx, str.del__f__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFiNetworksCache
lea rcx, [rbp + 0xbc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbc0]
call fcn.140001a58
lea rdx, str.del__f__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFiRules
lea rcx, [rbp + 0xbe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbe0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsServiceProfilesNetworkServiceAppDataLocalMicrosoftWindowsDeliveryOptimizationCache
lea rcx, [rbp + 0xc00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xc00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTemp
lea rcx, [rbp + 0xc20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xc20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataRoamingMicrosoftWindowsCloudStore
lea rcx, [rbp + 0xc40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xc40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalFortniteGameSaved
lea rcx, [rbp + 0xc60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xc60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsINF
lea rcx, [rbp + 0xc80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xc80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramData_username_MicrosoftXboxLive
lea rcx, [rbp + 0xca0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xca0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_UsersPublicDocuments
lea rcx, [rbp + 0xcc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xcc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsPrefetch
lea rcx, [rbp + 0xce0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xce0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalD3DSCache
lea rcx, [rbp + 0xd00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xd00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalCrashReportClient
lea rcx, [rbp + 0xd20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xd20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Windows_temp
lea rcx, [rbp + 0xd40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xd40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastore
lea rcx, [rbp + 0xd60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xd60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSoftwareDistributionDataStoreLogs
lea rcx, [rbp + 0xd80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xd80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsWERTemp
lea rcx, [rbp + 0xda0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xda0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalAMDDxCache
lea rcx, [rbp + 0xdc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xdc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalNVIDIA_Corporation
lea rcx, [rbp + 0xde0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xde0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsLogs
lea rcx, [rbp + 0xe00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xe00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastore
lea rcx, [rbp + 0xe20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xe20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSoftwareDistributionDataStoreLogs
lea rcx, [rbp + 0xe40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xe40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsWERTemp
lea rcx, [rbp + 0xe60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xe60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalAMDDxCache
lea rcx, [rbp + 0xe80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xe80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsPrefetch
lea rcx, [rbp + 0xea0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xea0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataUSOSharedLogs
lea rcx, [rbp + 0xec0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xec0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewy.
lea rcx, [rbp + 0xee0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xee0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCache.
lea rcx, [rbp + 0xf00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xf00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweAC
lea rcx, [rbp + 0xf20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xf20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweLocalCache
lea rcx, [rbp + 0xf40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xf40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings
lea rcx, [rbp + 0xf60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xf60]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteEnginePlugins_
lea rcx, [rbp + 0xf80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xf80]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePlugins_
lea rcx, [rbp + 0xfa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xfa0]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDir_
lea rcx, [rbp + 0xfc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xfc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalNVIDIA_Corporation_
lea rcx, [rbp + 0xfe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xfe0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataRoamingEasyAntiCheat
lea rcx, [rbp + 0x1000]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1000]
call fcn.140001a58
lea rdx, str.del__f__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFiNetworksCache
lea rcx, [rbp + 0x1020]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1020]
call fcn.140001a58
lea rdx, str.del__f__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFiRules
lea rcx, [rbp + 0x1040]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1040]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsServiceProfilesNetworkServiceAppDataLocalMicrosoftWindowsDeliveryOptimizationCache
lea rcx, [rbp + 0x1060]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1060]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTemp
lea rcx, [rbp + 0x1080]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1080]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataRoamingMicrosoftWindowsCloudStore
lea rcx, [rbp + 0x10a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x10a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalFortniteGameSaved
lea rcx, [rbp + 0x10c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x10c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsINF
lea rcx, [rbp + 0x10e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x10e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramData_username_MicrosoftXboxLive
lea rcx, [rbp + 0x1100]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1100]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsPrefetch
lea rcx, [rbp + 0x1120]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1120]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalD3DSCache
lea rcx, [rbp + 0x1140]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1140]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalCrashReportClient
lea rcx, [rbp + 0x1160]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1160]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Windows_temp
lea rcx, [rbp + 0x1180]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1180]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastore
lea rcx, [rbp + 0x11a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x11a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSoftwareDistributionDataStoreLogs
lea rcx, [rbp + 0x11c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x11c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsWERTemp
lea rcx, [rbp + 0x11e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x11e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalAMDDxCache
lea rcx, [rbp + 0x1200]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1200]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalNVIDIA_Corporation
lea rcx, [rbp + 0x1220]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1220]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsPrefetch
lea rcx, [rbp + 0x1240]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1240]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewy.
lea rcx, [rbp + 0x1260]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1260]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCache.
lea rcx, [rbp + 0x1280]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1280]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a__q__systemdrive_Users_username_AppDataLocalMicrosoftXboxLive.
lea rcx, [rbp + 0x12a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x12a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweAC
lea rcx, [rbp + 0x12c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x12c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweLocalCache
lea rcx, [rbp + 0x12e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x12e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings
lea rcx, [rbp + 0x1300]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1300]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteEnginePlugins_
lea rcx, [rbp + 0x1320]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1320]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePlugins_
lea rcx, [rbp + 0x1340]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1340]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDir_
lea rcx, [rbp + 0x1360]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1360]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteFortniteGameConfig_
lea rcx, [rbp + 0x1380]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1380]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Users_username_AppDataLocalNVIDIA_Corporation_
lea rcx, [rbp + 0x13a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x13a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataRoamingEasyAntiCheat
lea rcx, [rbp + 0x13c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x13c0]
call fcn.140001a58
lea rdx, str.del__f__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFiNetworksCache
lea rcx, [rbp + 0x13e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x13e0]
call fcn.140001a58
lea rdx, str.del__f__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFiRules
lea rcx, [rbp + 0x1400]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1400]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsServiceProfilesNetworkServiceAppDataLocalMicrosoftWindowsDeliveryOptimizationCache
lea rcx, [rbp + 0x1420]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1420]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTemp
lea rcx, [rbp + 0x1440]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1440]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCache
lea rcx, [rbp + 0x1460]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1460]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCookies
lea rcx, [rbp + 0x1480]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1480]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsIEDownloadHistory
lea rcx, [rbp + 0x14a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x14a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCache
lea rcx, [rbp + 0x14c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x14c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweAC
lea rcx, [rbp + 0x14e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x14e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweLocalCache
lea rcx, [rbp + 0x1500]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1500]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings
lea rcx, [rbp + 0x1520]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1520]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteEnginePlugins_
lea rcx, [rbp + 0x1540]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1540]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePlugins_
lea rcx, [rbp + 0x1560]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1560]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDir_
lea rcx, [rbp + 0x1580]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1580]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteFortniteGameConfig_
lea rcx, [rbp + 0x15a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x15a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q___systemdrive_Program_FilesEpic_GamesFortniteFortniteGameSaved_
lea rcx, [rbp + 0x15c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x15c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataRoamingEasyAntiCheat
lea rcx, [rbp + 0x15e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x15e0]
call fcn.140001a58
lea rdx, str.del__f__s__q_F:ProgramDataMicrosoftDataMartPaidWiFiNetworksCache
lea rcx, [rbp + 0x1600]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1600]
call fcn.140001a58
lea rdx, str.del__f__s__q_F:ProgramDataMicrosoftDataMartPaidWiFiRules
lea rcx, [rbp + 0x1620]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1620]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:WindowsServiceProfilesNetworkServiceAppDataLocalMicrosoftWindowsDeliveryOptimizationCache
lea rcx, [rbp + 0x1640]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1640]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalMicrosoftWindowsINetCache
lea rcx, [rbp + 0x1660]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1660]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalMicrosoftWindowsINetCookies
lea rcx, [rbp + 0x1680]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1680]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalMicrosoftWindowsHistory
lea rcx, [rbp + 0x16a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x16a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_Intel
lea rcx, [rbp + 0x16c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x16c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:WindowsSystem32config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheMetaData
lea rcx, [rbp + 0x16e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x16e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalMicrosoftFeeds_Cache
lea rcx, [rbp + 0x1700]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1700]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataRoamingEasyAntiCheat
lea rcx, [rbp + 0x1720]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1720]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Windows_servicingInboxFodMetadataCache
lea rcx, [rbp + 0x1740]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1740]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataRoamingMicrosoftWindowsCloudStore
lea rcx, [rbp + 0x1760]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1760]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalFortniteGameSaved
lea rcx, [rbp + 0x1780]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1780]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsExplorerIconCacheToDelete
lea rcx, [rbp + 0x17a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x17a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsINF
lea rcx, [rbp + 0x17c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x17c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramData_username_MicrosoftXboxLiveNSALCache
lea rcx, [rbp + 0x17e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x17e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsPrefetch
lea rcx, [rbp + 0x1800]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1800]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalD3DSCache
lea rcx, [rbp + 0x1820]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1820]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalCrashReportClient
lea rcx, [rbp + 0x1840]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1840]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsLogs
lea rcx, [rbp + 0x1860]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1860]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastore
lea rcx, [rbp + 0x1880]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1880]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSoftwareDistributionDataStoreLogs
lea rcx, [rbp + 0x18a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x18a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsWERTemp
lea rcx, [rbp + 0x18c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x18c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalAMDDxCache
lea rcx, [rbp + 0x18e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x18e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataUSOSharedLogs
lea rcx, [rbp + 0x1900]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1900]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Usersusername_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewy.
lea rcx, [rbp + 0x1920]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1920]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCache.
lea rcx, [rbp + 0x1940]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1940]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweAC
lea rcx, [rbp + 0x1960]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1960]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweLocalCache
lea rcx, [rbp + 0x1980]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1980]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings
lea rcx, [rbp + 0x19a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x19a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Program_FilesEpic_GamesFortniteEnginePlugins
lea rcx, [rbp + 0x19c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x19c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePlugins
lea rcx, [rbp + 0x19e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x19e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDir
lea rcx, [rbp + 0x1a00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1a00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalNVIDIA_Corporation
lea rcx, [rbp + 0x1a20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1a20]
call fcn.140001a58
lea rdx, str.del__f__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFiNetworksCache
lea rcx, [rbp + 0x1a40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1a40]
call fcn.140001a58
lea rdx, str.del__f__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFiRules
lea rcx, [rbp + 0x1a60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1a60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsServiceProfilesNetworkServiceAppDataLocalMicrosoftWindowsDeliveryOptimizationCache
lea rcx, [rbp + 0x1a80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1a80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramData_username_MicrosoftXboxLive
lea rcx, [rbp + 0x1aa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1aa0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalNVIDIA_Corporation
lea rcx, [rbp + 0x1ac0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1ac0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftXboxLive.
lea rcx, [rbp + 0x1ae0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1ae0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Program_FilesEpic_GamesFortniteFortniteGameConfig
lea rcx, [rbp + 0x1b00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1b00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCache
lea rcx, [rbp + 0x1b20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1b20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCookies
lea rcx, [rbp + 0x1b40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1b40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsIEDownloadHistory
lea rcx, [rbp + 0x1b60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1b60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsIECompatUaCache
lea rcx, [rbp + 0x1b80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1b80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsIECompatCache
lea rcx, [rbp + 0x1ba0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1ba0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCookiesDNTException
lea rcx, [rbp + 0x1bc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1bc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCookiesPrivacIE
lea rcx, [rbp + 0x1be0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1be0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistory
lea rcx, [rbp + 0x1c00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1c00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistoryLow
lea rcx, [rbp + 0x1c20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1c20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.OneConnect_8wekyb3d8bbwe
lea rcx, [rbp + 0x1c40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1c40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewy
lea rcx, [rbp + 0x1c60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1c60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyAC
lea rcx, [rbp + 0x1c80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1c80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyLocalCache
lea rcx, [rbp + 0x1ca0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1ca0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewySettings
lea rcx, [rbp + 0x1cc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1cc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsWERTemp
lea rcx, [rbp + 0x1ce0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1ce0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFi
lea rcx, [rbp + 0x1d00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1d00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFiRules
lea rcx, [rbp + 0x1d20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1d20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFiNetworksCache
lea rcx, [rbp + 0x1d40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1d40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCache
lea rcx, [rbp + 0x1d60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1d60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheSelfUpdate
lea rcx, [rbp + 0x1d80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1d80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheContent
lea rcx, [rbp + 0x1da0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1da0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheData
lea rcx, [rbp + 0x1dc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1dc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheInventory
lea rcx, [rbp + 0x1de0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1de0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheMetadata
lea rcx, [rbp + 0x1e00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1e00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheStatus
lea rcx, [rbp + 0x1e20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1e20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheTemporary
lea rcx, [rbp + 0x1e40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1e40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUsedSpace
lea rcx, [rbp + 0x1e60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1e60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUnusedSpace
lea rcx, [rbp + 0x1e80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1e80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUpdateHistory
lea rcx, [rbp + 0x1ea0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1ea0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUpdating
lea rcx, [rbp + 0x1ec0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1ec0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUpdates
lea rcx, [rbp + 0x1ee0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1ee0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheContentIndex
lea rcx, [rbp + 0x1f00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1f00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheContentMetadata
lea rcx, [rbp + 0x1f20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1f20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheDynamicContent
lea rcx, [rbp + 0x1f40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1f40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheEvents
lea rcx, [rbp + 0x1f60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1f60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheExpired
lea rcx, [rbp + 0x1f80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1f80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheLocalContent
lea rcx, [rbp + 0x1fa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1fa0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheLocalMeta
lea rcx, [rbp + 0x1fc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1fc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheLocalStates
lea rcx, [rbp + 0x1fe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x1fe0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheLocalUpdates
lea rcx, [rbp + 0x2000]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2000]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheMetaData
lea rcx, [rbp + 0x2020]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2020]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCachePlugin
lea rcx, [rbp + 0x2040]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2040]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCachePlugins
lea rcx, [rbp + 0x2060]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2060]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheScheduled
lea rcx, [rbp + 0x2080]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2080]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheStore
lea rcx, [rbp + 0x20a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x20a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheSystem
lea rcx, [rbp + 0x20c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x20c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheTemp
lea rcx, [rbp + 0x20e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x20e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUpdateHistory
lea rcx, [rbp + 0x2100]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2100]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUpdatesMetadata
lea rcx, [rbp + 0x2120]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2120]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUpdatesPackage
lea rcx, [rbp + 0x2140]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2140]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUpdatesPlugins
lea rcx, [rbp + 0x2160]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2160]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUpdatesStatus
lea rcx, [rbp + 0x2180]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2180]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUpdatesTemp
lea rcx, [rbp + 0x21a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x21a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUpdatesUsedSpace
lea rcx, [rbp + 0x21c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x21c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUpdatesUnusedSpace
lea rcx, [rbp + 0x21e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x21e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUpdatesUpdate
lea rcx, [rbp + 0x2200]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2200]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUpdatesUpdateMetadata
lea rcx, [rbp + 0x2220]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2220]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsDeliveryOptimizationCacheUpdatesUpdateStatus
lea rcx, [rbp + 0x2240]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2240]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive__Recycle.binS_1_5_21_2891436483_3527068592_4159525493_1000
lea rcx, [rbp + 0x2260]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2260]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive__Recycle.binS_1_5_21_2891436483_3527068592_4159525493_1001
lea rcx, [rbp + 0x2280]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2280]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive__Recycle.binS_1_5_21_2891436483_3527068592_4159525493_1001_IZHXE0R.lnk
lea rcx, [rbp + 0x22a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x22a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive__Recycle.binS_1_5_21_2891436483_3527068592_4159525493_1001_RZHXE0R.lnk
lea rcx, [rbp + 0x22c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x22c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive__Recycle.binS_1_5_21_2891436483_3527068592_4159525493_1001desktop.ini
lea rcx, [rbp + 0x22e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x22e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsWERReportArchiveCritical_10.0.18362.590_b537a032149b3fc544a53a99146fb73534da_00000000_c8f94735_9873_444c_a306_8dd6954b572a
lea rcx, [rbp + 0x2300]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2300]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsWERReportArchiveNonCritical_80004004_22c1ca83e5fa39476cd1d16271645299486b10b8_00000000_929a6e9f_49b8_4215_b682_cc00cf3e418d
lea rcx, [rbp + 0x2320]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2320]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsWERReportArchiveNonCritical_Acquisition_Lang_90366fa248f7617f221c332dfce0735c7c46c23a_00000000_a7506f65_0dc8_4d50_91cb_369e12f41d9e
lea rcx, [rbp + 0x2340]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2340]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsWERReportArchiveNonCritical_Update__7b704b9417a1f964ba24aef8b6e694eaa4e3f66d_00000000_c90c7df1_a072_4948_a56f_e7c8cd20598c
lea rcx, [rbp + 0x2360]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2360]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataMicrosoftWindowsWERReportQueueAppCrash_cleaner_protecte_fcd481920fdbe9e1bc33fa37d3af173eccfa9_25b40a16_bcd81103_aa68_4b70_858e_e88e8a6a09aaReport.wer
lea rcx, [rbp + 0x2380]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2380]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataMicrosoftWindowsWERTempWER8FDB.tmp.werInternalMetadata.xml
lea rcx, [rbp + 0x23a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x23a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataMicrosoftWindowsWERTempWER9141.tmp.werInternalMetadata.xml
lea rcx, [rbp + 0x23c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x23c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataMicrosoftWindowsWERTempWERB86A.tmp.werInternalMetadata.xml
lea rcx, [rbp + 0x23e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x23e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataMicrosoftWindowsWERTempWERBED3.tmp.werInternalMetadata.xml
lea rcx, [rbp + 0x2400]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2400]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataMicrosoftWindowsWERTempWERCAAA.tmp.werInternalMetadata.xml
lea rcx, [rbp + 0x2420]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2420]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsSystemNotificationUxBroker.3236b213_68aa_47bc_9264_64108ecd7cec.1.etl
lea rcx, [rbp + 0x2440]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2440]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsSystemNotificationUxBroker.4630cbeb_d47f_4f81_8c2b_36a04b5af228.1.etl
lea rcx, [rbp + 0x2460]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2460]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsSystemNotificationUxBroker.d5ccaa76_0da2_4ca5_80fa_1bf2f8381baf.1.etl
lea rcx, [rbp + 0x2480]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2480]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsSystemUpdateSessionOrchestration.59c7b0b4_c337_4d08_b9c0_fa426979e9a5.1.etl
lea rcx, [rbp + 0x24a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x24a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsSystemUpdateSessionOrchestration.67b6de68_f839_49b6_b54b_2ec0f2db220e.1.etl
lea rcx, [rbp + 0x24c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x24c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsSystemUpdateSessionOrchestration.d326e512_11ec_44ce_9a43_c6ccb04a48e2.1.etl
lea rcx, [rbp + 0x24e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x24e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsSystemUpdateSessionOrchestration.ef91322e_85f2_43dc_a356_738381fab3ca.1.etl
lea rcx, [rbp + 0x2500]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2500]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsSystemUsoCoreWorker.4c906b02_422b_4885_8ffd_64cf55dcbd63.1.etl
lea rcx, [rbp + 0x2520]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2520]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsSystemUsoCoreWorker.76bc7c90_3fed_441b_a59b_8409ad5209df.1.etl
lea rcx, [rbp + 0x2540]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2540]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsSystemUsoCoreWorker.76bc7c90_3fed_441b_a59b_8409ad5209df.2.etl
lea rcx, [rbp + 0x2560]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2560]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsSystemUsoCoreWorker.8c7fc4f8_c2b7_404e_b42d_5da3c0f99d13.1.etl
lea rcx, [rbp + 0x2580]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2580]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsSystemUsoCoreWorker.a994d378_4627_4189_ba2d_8bdf7bc5bfc3.1.etl
lea rcx, [rbp + 0x25a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x25a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsSystemUsoCoreWorker.e5dbe7c2_b98a_4c80_a513_a80ac87497fd.1.etl
lea rcx, [rbp + 0x25c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x25c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataUSOSharedLogsUser
lea rcx, [rbp + 0x25e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x25e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsUserNotificationUx.497a0dd8_11e8_46a5_9294_74baa180b1f7.1.etl
lea rcx, [rbp + 0x2600]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2600]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsUserNotificationUx.5f227995_df8a_41ea_b26c_39b09ac901d5.1.etl
lea rcx, [rbp + 0x2620]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2620]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsUserNotificationUx.6f43df03_c9b0_420f_9309_3e3d4f68c07d.1.etl
lea rcx, [rbp + 0x2640]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2640]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsUserUsoCoreWorker.0119182d_0d5e_4c6a_99a8_c9d5872c6f24.1.etl
lea rcx, [rbp + 0x2660]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2660]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsUserUsoCoreWorker.12f06b71_d9d5_468e_bc3e_98f9d7b6b6e4.1.etl
lea rcx, [rbp + 0x2680]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2680]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsUserUsoCoreWorker.2b0f5650_6b4b_4d3c_9cb8_df31502122e6.1.etl
lea rcx, [rbp + 0x26a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x26a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsUserUsoCoreWorker.2d45d6d4_8cfb_4d60_8b16_d68c8c6d9e60.1.etl
lea rcx, [rbp + 0x26c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x26c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsUserUsoCoreWorker.43d7f650_730b_4f9b_a7c0_8b59dfd8e6d4.1.etl
lea rcx, [rbp + 0x26e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x26e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsUserUsoCoreWorker.47a647e6_908a_4353_a4d1_5d280489e8b5.1.etl
lea rcx, [rbp + 0x2700]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2700]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsUserUsoCoreWorker.4739c6d0_b879_4b25_8c3c_2dfed3096c6b.1.etl
lea rcx, [rbp + 0x2720]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2720]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_ProgramDataUSOSharedLogsUserUsoCoreWorker.6f43df03_c9b0_420f_9309_3e3d4f68c07d.1.etl
lea rcx, [rbp + 0x2740]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2740]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsTemp
lea rcx, [rbp + 0x2760]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2760]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsTemp.
lea rcx, [rbp + 0x2780]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2780]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsPrefetch
lea rcx, [rbp + 0x27a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x27a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsPrefetch.
lea rcx, [rbp + 0x27c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x27c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsPrefetch.
lea rcx, [rbp + 0x27e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x27e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSoftwareDistributionDownload
lea rcx, [rbp + 0x2800]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2800]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionDownload.
lea rcx, [rbp + 0x2820]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2820]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionDownload.
lea rcx, [rbp + 0x2840]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2840]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionReportingEvents.log
lea rcx, [rbp + 0x2860]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2860]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionReportingEvents.log.1
lea rcx, [rbp + 0x2880]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2880]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionReportingEvents.log.2
lea rcx, [rbp + 0x28a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x28a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionReportingEvents.log.3
lea rcx, [rbp + 0x28c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x28c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionReportingEvents.log.4
lea rcx, [rbp + 0x28e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x28e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionReportingEvents.log.5
lea rcx, [rbp + 0x2900]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2900]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionReportingEvents.log.6
lea rcx, [rbp + 0x2920]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2920]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionReportingEvents.log.7
lea rcx, [rbp + 0x2940]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2940]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionReportingEvents.log.8
lea rcx, [rbp + 0x2960]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2960]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionReportingEvents.log.9
lea rcx, [rbp + 0x2980]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2980]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsPrefetch
lea rcx, [rbp + 0x29a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x29a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsPrefetch.
lea rcx, [rbp + 0x29c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x29c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache6d7e9aa9e1f7bdef62c968f6ba5c6262feef3652.qmlc
lea rcx, [rbp + 0x29e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x29e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache6f24684d8b50193eb3cdfee634ff56f1ba4b5ffd.jsc
lea rcx, [rbp + 0x2a00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2a00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache764491f39a190ce4784fe9fb5f9321d6a83a6923.qmlc
lea rcx, [rbp + 0x2a20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2a20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache7db9dca541ca970bbde9a255a4c8ad930d661522.qmlc
lea rcx, [rbp + 0x2a40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2a40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache7ef944aa89e49823dadcfe593aceb667d1f0ca6b.qmlc
lea rcx, [rbp + 0x2a60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2a60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache8b421c776123b00d00c5fc368b81f68c22c3bf3a.qmlc
lea rcx, [rbp + 0x2a80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2a80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache93f9f424943f9bc70e700cc1b13e475994baf4dc.qmlc
lea rcx, [rbp + 0x2aa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2aa0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache95a8b5eb4b9d209a46517148d3490ca93123bfc6.qmlc
lea rcx, [rbp + 0x2ac0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2ac0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache9b2c821191df464a61bc66bd5026075a4b232af8.jsc
lea rcx, [rbp + 0x2ae0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2ae0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache9cb98731fb29195e48040dc21ae224f0d4c3cc71.qmlc
lea rcx, [rbp + 0x2b00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2b00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache_a178e511f194367f96881a7f045e55580475fc41.qmlc
lea rcx, [rbp + 0x2b20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2b20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache_a24fa65f5047c8878e02c45ce342d5d69adf2067.qmlc
lea rcx, [rbp + 0x2b40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2b40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache_abc17aac885f87afcc5fbea22502bfa7c3e539ca.qmlc
lea rcx, [rbp + 0x2b60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2b60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache_ac4358be4e9a3cdeb4a8e1d576ec478aa216e9b9.qmlc
lea rcx, [rbp + 0x2b80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2b80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache_b61b2ceb9b2be7177aab396b65e75f1be5156c45.qmlc
lea rcx, [rbp + 0x2ba0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2ba0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache_bfd74a5141e51e29b3940c0f698c2755e8764fb3.qmlc
lea rcx, [rbp + 0x2bc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2bc0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcachec4d8484a5bc074b78ea4656d40571c254284a480.qmlc
lea rcx, [rbp + 0x2be0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2be0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcachec7f5d769a1cf8c7f79053219959679b2a01cd04a.qmlc
lea rcx, [rbp + 0x2c00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2c00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcached0ed837cb6b63600f6074e658f45046a81cce16b.qmlc
lea rcx, [rbp + 0x2c20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2c20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcached21507d20efc9bdd144e9be39568879e5b8ab2dd.qmlc
lea rcx, [rbp + 0x2c40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2c40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcached7c9692f2b381eb260ee1d3b3bf35a5ce64ca547.qmlc
lea rcx, [rbp + 0x2c60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2c60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcached9ff1789c7bf11aa8d294ede3df00436548279aa.qmlc
lea rcx, [rbp + 0x2c80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2c80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcachee32adf378436174ff740b9f268a4fb98f4a5fb41.qmlc
lea rcx, [rbp + 0x2ca0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2ca0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcachee50e62317dd976f8872060c6060416dd3dac1b22.qmlc
lea rcx, [rbp + 0x2cc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2cc0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcachee85ee428750b0511dee051a15583b9849dbe5386.qmlc
lea rcx, [rbp + 0x2ce0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2ce0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache_f353ffb44954d9d0a50ef976fad4f9df06ed65f2.qmlc
lea rcx, [rbp + 0x2d00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2d00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache_f8700375b8b4e8a8755278ae786bf9b334828227.qmlc
lea rcx, [rbp + 0x2d20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2d20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalAMDRadeonsoftwarecacheqmlcache_fb2d4df45b5d0f50722b4fc45e623c3b956e27a4.qmlc
lea rcx, [rbp + 0x2d40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2d40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftCLR_v4.0UsageLogsLocalBridge.exe
lea rcx, [rbp + 0x2d60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2d60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftCLR_v4.0UsageLogspowershell.exe
lea rcx, [rbp + 0x2d80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2d80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftFeeds
lea rcx, [rbp + 0x2da0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2da0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftFeeds_Cache
lea rcx, [rbp + 0x2dc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2dc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftInternet_ExplorerRecovery
lea rcx, [rbp + 0x2de0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2de0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftInternet_ExplorerRecoveryActive
lea rcx, [rbp + 0x2e00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2e00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftInternet_ExplorerRecoveryHigh
lea rcx, [rbp + 0x2e20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2e20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftInternet_ExplorerRecoveryHighActive
lea rcx, [rbp + 0x2e40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2e40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftInternet_ExplorerRecoveryHighLast_Active
lea rcx, [rbp + 0x2e60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2e60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftInternet_ExplorerRecoveryHighLast_ActiveRecoveryStore.A4D06787_1846_11EB_9B1E_5404A67EF09C.dat
lea rcx, [rbp + 0x2e80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2e80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftInternet_ExplorerRecoveryHighLast_ActiveA4D06788_1846_11EB_9B1E_5404A67EF09C.dat
lea rcx, [rbp + 0x2ea0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2ea0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftInternet_ExplorerRecoveryHighLast_ActiveA4D06789_1846_11EB_9B1E_5404A67EF09C.dat
lea rcx, [rbp + 0x2ec0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2ec0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftInternet_ExplorerRecoveryLast_Active
lea rcx, [rbp + 0x2ee0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2ee0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftInternet_ExplorerRecoveryLast_ActiveRecoveryStore.FB5C5BC1_1846_11EB_9B1E_5404A67EF09C.dat
lea rcx, [rbp + 0x2f00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2f00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftInternet_ExplorerRecoveryLast_ActiveFB5C5BC2_1846_11EB_9B1E_5404A67EF09C.dat
lea rcx, [rbp + 0x2f20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2f20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftInternet_ExplorerRecoveryLast_ActiveFB5C5BC3_1846_11EB_9B1E_5404A67EF09C.dat
lea rcx, [rbp + 0x2f40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2f40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistoryHistory.IE5MSHist012020102620201027
lea rcx, [rbp + 0x2f60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2f60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistoryHistory.IE5MSHist012020102620201027container.dat
lea rcx, [rbp + 0x2f80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2f80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistoryHistory.IE5MSHist012020102720201028
lea rcx, [rbp + 0x2fa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2fa0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistoryHistory.IE5MSHist012020102720201028container.dat
lea rcx, [rbp + 0x2fc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2fc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistoryLow
lea rcx, [rbp + 0x2fe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x2fe0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistoryLowHistory.IE5
lea rcx, [rbp + 0x3000]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3000]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistoryLowHistory.IE5container.dat
lea rcx, [rbp + 0x3020]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3020]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsIECompatCache
lea rcx, [rbp + 0x3040]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3040]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsIECompatCachecontainer.dat
lea rcx, [rbp + 0x3060]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3060]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsIECompatCacheLow
lea rcx, [rbp + 0x3080]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3080]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsIECompatCacheLowcontainer.dat
lea rcx, [rbp + 0x30a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x30a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsIECompatUaCache
lea rcx, [rbp + 0x30c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x30c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsIECompatUaCachecontainer.dat
lea rcx, [rbp + 0x30e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x30e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsIECompatUaCacheLow
lea rcx, [rbp + 0x3100]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3100]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsIECompatUaCacheLowcontainer.dat
lea rcx, [rbp + 0x3120]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3120]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsIEDownloadHistory
lea rcx, [rbp + 0x3140]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3140]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsIEDownloadHistorycontainer.dat
lea rcx, [rbp + 0x3160]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3160]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEcontainer.dat
lea rcx, [rbp + 0x3180]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3180]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEJ5FKB82Z
lea rcx, [rbp + 0x31a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x31a0]
call fcn.140001a58
lea rdx, [0x14018ed40]
lea rcx, [rbp + 0x31c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x31c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEJ5FKB82Z2_1_.htm
lea rcx, [rbp + 0x31e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x31e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEJ5FKB82Z2_1_.htm
lea rcx, [rbp + 0x3200]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3200]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEJ5FKB82Z2_1_
lea rcx, [rbp + 0x3220]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3220]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEJ5FKB82Z2_1_
lea rcx, [rbp + 0x3240]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3240]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073checkmark_green_alpha_1_.png
lea rcx, [rbp + 0x3260]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3260]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073ConvergedLogin_PCore_m_AEFbtYqJeKR6sGUe93pA2_1_.js
lea rcx, [rbp + 0x3280]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3280]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073ConvergedLogin_PCore_m_AEFbtYqJeKR6sGUe93pA2_2_.js
lea rcx, [rbp + 0x32a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x32a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073css_1_.css
lea rcx, [rbp + 0x32c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x32c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073default_css_rrlb_en_1_.css
lea rcx, [rbp + 0x32e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x32e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073driver_09_us_1_.xml
lea rcx, [rbp + 0x3300]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3300]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_favicon_1_.png
lea rcx, [rbp + 0x3320]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3320]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_favicon_2_.png
lea rcx, [rbp + 0x3340]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3340]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_favicon_3_.png
lea rcx, [rbp + 0x3360]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3360]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_fe_a5cf09_1_.js
lea rcx, [rbp + 0x3380]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3380]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_frame320_270_1_.css
lea rcx, [rbp + 0x33a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x33a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_f_1_.txt
lea rcx, [rbp + 0x33c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x33c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_f_2_.txt
lea rcx, [rbp + 0x33e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x33e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073grey_arrow_center_1_.png
lea rcx, [rbp + 0x3400]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3400]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073GyazoIcon_ca785ed7ee_1_.woff
lea rcx, [rbp + 0x3420]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3420]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073index_1_..htm
lea rcx, [rbp + 0x3440]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3440]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073insight.beta.min_1_.js
lea rcx, [rbp + 0x3460]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3460]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073installdone_1_..htm
lea rcx, [rbp + 0x3480]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3480]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073jquery_1_.js
lea rcx, [rbp + 0x34a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x34a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073js_1_.js
lea rcx, [rbp + 0x34c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x34c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073js_2_.js
lea rcx, [rbp + 0x34e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x34e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073KFOkCnqEu92Fr1MmgVxIIzQ_1_.woff
lea rcx, [rbp + 0x3500]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3500]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073KFOlCnqEu92Fr1MmSU5fBBc__1_.woff
lea rcx, [rbp + 0x3520]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3520]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073known_providers_download_v1_1_.xml
lea rcx, [rbp + 0x3540]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3540]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073launch_EN7b3d710ac67a4a1195648458258f97dd.min_1_.js
lea rcx, [rbp + 0x3560]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3560]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073mixpanel_2_latest.min_1_.js
lea rcx, [rbp + 0x3580]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3580]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073mwf_auto_init_main.var.min_1_.js
lea rcx, [rbp + 0x35a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x35a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073onboarding_intro_bg_2x_d6d5b26920_1_.png
lea rcx, [rbp + 0x35c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x35c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073osd_1_.js
lea rcx, [rbp + 0x35e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x35e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073pubads_impl_2020102201_1_.js
lea rcx, [rbp + 0x3600]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3600]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073px_1_.gif
lea rcx, [rbp + 0x3620]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3620]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073p_1_.gif
lea rcx, [rbp + 0x3640]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3640]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073p_2_.gif
lea rcx, [rbp + 0x3660]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3660]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073p_3_.gif
lea rcx, [rbp + 0x3680]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3680]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_response_header_1_.xml
lea rcx, [rbp + 0x36a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x36a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_s_1_.png
lea rcx, [rbp + 0x36c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x36c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_s_2_.png
lea rcx, [rbp + 0x36e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x36e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_s_3_.png
lea rcx, [rbp + 0x3700]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3700]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_s_4_.png
lea rcx, [rbp + 0x3720]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3720]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_s_5_.png
lea rcx, [rbp + 0x3740]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3740]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_s_6_.png
lea rcx, [rbp + 0x3760]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3760]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_s_7_.png
lea rcx, [rbp + 0x3780]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3780]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_service_1.0_6_1_.js
lea rcx, [rbp + 0x37a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x37a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_setup_1_..htm
lea rcx, [rbp + 0x37c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x37c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073ui_web_1_.js
lea rcx, [rbp + 0x37e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x37e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEUC06S073_view_1_.js
lea rcx, [rbp + 0x3800]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3800]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowContent.IE5
lea rcx, [rbp + 0x3820]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3820]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE
lea rcx, [rbp + 0x3840]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3840]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2
lea rcx, [rbp + 0x3860]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3860]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD27c_0cba17_1_.css
lea rcx, [rbp + 0x3880]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3880]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2_background_gradient_1_
lea rcx, [rbp + 0x38a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x38a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2css_1_.css
lea rcx, [rbp + 0x38c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x38c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2_filers3_1_..htm
lea rcx, [rbp + 0x38e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x38e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2httpErrorPagesScripts_1_
lea rcx, [rbp + 0x3900]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3900]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE1Mu3b_1_.png
lea rcx, [rbp + 0x3920]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3920]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4Dnv6_1_.png
lea rcx, [rbp + 0x3940]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3940]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4DsDH_1_.png
lea rcx, [rbp + 0x3960]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3960]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4GeFi_1_.jpg
lea rcx, [rbp + 0x3980]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3980]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4GhRT_1_.jpg
lea rcx, [rbp + 0x39a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x39a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4GiCD_1_.jpg
lea rcx, [rbp + 0x39c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x39c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4Gphi_1_.jpg
lea rcx, [rbp + 0x39e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x39e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4GhRT_1_.jpg
lea rcx, [rbp + 0x3a00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3a00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4GiCD_1_.jpg
lea rcx, [rbp + 0x3a20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3a20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4Gphi_1_.jpg
lea rcx, [rbp + 0x3a40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3a40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4GpKa_1_.jpg
lea rcx, [rbp + 0x3a60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3a60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4GsBq_1_.jpg
lea rcx, [rbp + 0x3a80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3a80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4GsBr_1_.jpg
lea rcx, [rbp + 0x3aa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3aa0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4n1yl_1_.jpg
lea rcx, [rbp + 0x3ac0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3ac0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4n4cm_1_.jpg
lea rcx, [rbp + 0x3ae0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3ae0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4ncJ7_1_.jpg
lea rcx, [rbp + 0x3b00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3b00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4ncJa_1_.jpg
lea rcx, [rbp + 0x3b20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3b20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2RE4nqTh_1_.png
lea rcx, [rbp + 0x3b40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3b40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIE3K1Z2XD2Windows_Cortana_Google_img_1_.jpg
lea rcx, [rbp + 0x3b60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3b60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIEcontainer.dat
lea rcx, [rbp + 0x3b80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3b80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL
lea rcx, [rbp + 0x3ba0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3ba0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_fwlink_1_
lea rcx, [rbp + 0x3bc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3bc0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_fwlink_2_
lea rcx, [rbp + 0x3be0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3be0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKLimg.gif
lea rcx, [rbp + 0x3c00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3c00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKLimg6.jpg
lea rcx, [rbp + 0x3c20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3c20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKLj4PuqJQ_1_.jpg
lea rcx, [rbp + 0x3c40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3c40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKLj4PuqJQ_2_.jpg
lea rcx, [rbp + 0x3c60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3c60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKLPH4Erq_1_.jpg
lea rcx, [rbp + 0x3c80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3c80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKLPH4Ers_1_.jpg
lea rcx, [rbp + 0x3ca0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3ca0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKLPH4Ers_2_.jpg
lea rcx, [rbp + 0x3cc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3cc0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKLPH4Erp_1_.jpg
lea rcx, [rbp + 0x3ce0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3ce0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKLPH4Ery_1_.jpg
lea rcx, [rbp + 0x3d00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3d00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKLPH4Ery_2_.jpg
lea rcx, [rbp + 0x3d20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3d20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7IvgO9_1_.jpg
lea rcx, [rbp + 0x3d40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3d40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7IvgO9_2_.jpg
lea rcx, [rbp + 0x3d60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3d60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7Ivk9Q_1_.jpg
lea rcx, [rbp + 0x3d80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3d80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7Ivk9Q_2_.jpg
lea rcx, [rbp + 0x3da0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3da0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7Ivs8v_1_.jpg
lea rcx, [rbp + 0x3dc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3dc0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7Ivs8v_2_.jpg
lea rcx, [rbp + 0x3de0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3de0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7IvqJQ_1_.jpg
lea rcx, [rbp + 0x3e00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3e00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7IvqJQ_2_.jpg
lea rcx, [rbp + 0x3e20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3e20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7IvqJQ_3_.jpg
lea rcx, [rbp + 0x3e40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3e40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7IvqJQ_4_.jpg
lea rcx, [rbp + 0x3e60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3e60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7IvqJQ_5_.jpg
lea rcx, [rbp + 0x3e80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3e80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7IvqJQ_6_.jpg
lea rcx, [rbp + 0x3ea0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3ea0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7IvqJQ_7_.jpg
lea rcx, [rbp + 0x3ec0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3ec0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7IvqJQ_8_.jpg
lea rcx, [rbp + 0x3ee0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3ee0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheLowIENH0YNNKL_t7IvqJQ_9_.jpg
lea rcx, [rbp + 0x3f00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3f00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewyLocalStateTargetedContentCache_v388000161c7724eb10fe348fd8b2d21c9360f66cf_1
lea rcx, [rbp + 0x3f20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3f20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewyLocalState
lea rcx, [rbp + 0x3f40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3f40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewyLocalState
lea rcx, [rbp + 0x3f60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3f60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewyLocalState
lea rcx, [rbp + 0x3f80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3f80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewyLocalState
lea rcx, [rbp + 0x3fa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3fa0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.StartMenuExperienceHost_cw5n1h2txyewyTempState
lea rcx, [rbp + 0x3fc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3fc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACBackgroundTransferApi
lea rcx, [rbp + 0x3fe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x3fe0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetCache
lea rcx, [rbp + 0x4000]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4000]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetCachecontainer.dat
lea rcx, [rbp + 0x4020]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4020]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetCacheDKWILU71
lea rcx, [rbp + 0x4040]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4040]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetCacheE3XZJD2S
lea rcx, [rbp + 0x4060]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4060]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetCacheO3BIZQEJ
lea rcx, [rbp + 0x4080]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4080]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetCacheY29LIHAY
lea rcx, [rbp + 0x40a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x40a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetCookies
lea rcx, [rbp + 0x40c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x40c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetCookiesESE
lea rcx, [rbp + 0x40e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x40e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetHistory
lea rcx, [rbp + 0x4100]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4100]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetHistoryBackgroundTransferApi
lea rcx, [rbp + 0x4120]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4120]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetHistoryBackgroundTransferApicontainer.dat
lea rcx, [rbp + 0x4140]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4140]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetHistoryBackgroundTransferApiGroup
lea rcx, [rbp + 0x4160]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4160]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoft
lea rcx, [rbp + 0x4180]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4180]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoftCryptnetUrlCache
lea rcx, [rbp + 0x41a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x41a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoftCryptnetUrlCacheContent
lea rcx, [rbp + 0x41c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x41c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoftCryptnetUrlCacheContent57C8EDB95DF3F0AD4EE2DC2B8CFD4157
lea rcx, [rbp + 0x41e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x41e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoftCryptnetUrlCacheContent6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63
lea rcx, [rbp + 0x4200]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4200]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoftCryptnetUrlCacheContent77EC63BDA74BD0D0E0426DC8F8008506
lea rcx, [rbp + 0x4220]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4220]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoftCryptnetUrlCacheContent80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177
lea rcx, [rbp + 0x4240]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4240]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoftCryptnetUrlCacheContentFB0D848F74F70BB2EAA93746D24D9749
lea rcx, [rbp + 0x4260]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4260]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoftCryptnetUrlCacheMetaData
lea rcx, [rbp + 0x4280]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4280]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoftCryptnetUrlCacheMetaData57C8EDB95DF3F0AD4EE2DC2B8CFD4157
lea rcx, [rbp + 0x42a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x42a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoftCryptnetUrlCacheMetaData6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63
lea rcx, [rbp + 0x42c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x42c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoftCryptnetUrlCacheMetaData77EC63BDA74BD0D0E0426DC8F8008506
lea rcx, [rbp + 0x42e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x42e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoftCryptnetUrlCacheMetaData80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177
lea rcx, [rbp + 0x4300]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4300]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoftCryptnetUrlCacheMetaDataFB0D848F74F70BB2EAA93746D24D9749
lea rcx, [rbp + 0x4320]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4320]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACMicrosoftCryptnetUrlCache
lea rcx, [rbp + 0x4340]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4340]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweAC
lea rcx, [rbp + 0x4360]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4360]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbwe
lea rcx, [rbp + 0x4380]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4380]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalUnrealEngine4.23SavedConfigWindowsManifest.ini
lea rcx, [rbp + 0x43a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x43a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalUnrealEngineLauncher
lea rcx, [rbp + 0x43c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x43c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalUnrealEngineLaunchercom
lea rcx, [rbp + 0x43e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x43e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent
lea rcx, [rbp + 0x4400]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4400]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent0177A2B8C3D6561744552D69E6BD54B0_5CE748556F479AAF2B2F68B8C4FFC921
lea rcx, [rbp + 0x4420]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4420]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent0255CEC2C51D081EFF40366512890989_030671A634A8767F1A3BDBEF73264BD6
lea rcx, [rbp + 0x4440]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4440]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent07CEF2F654E3ED6050FFC9B6EB844250_27F2F3EAE5ACF629E280F218628D1935
lea rcx, [rbp + 0x4460]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4460]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D
lea rcx, [rbp + 0x4480]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4480]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent089915B119001793D7BF4EE252078087
lea rcx, [rbp + 0x44a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x44a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent0972B7C417F696E06E186AEB26286F01_04451AA00A576F21A374E740D0AF7FCE
lea rcx, [rbp + 0x44c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x44c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent0972B7C417F696E06E186AEB26286F01_04EE11A998985CD7A51904A574822082
lea rcx, [rbp + 0x44e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x44e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent16452181C5FFFED5EC9E5598AF62236B
lea rcx, [rbp + 0x4500]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4500]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent1E11E75149C17A93653DA7DC0B8CF53F_23C03C7F20259C89EC80B04BB121BB9B
lea rcx, [rbp + 0x4520]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4520]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent1E11E75149C17A93653DA7DC0B8CF53F_81A542ACDA3B2CCD7E4BD57E47A4E768
lea rcx, [rbp + 0x4540]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4540]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent285248A5750721A9ACC886EF3622CE11_B581B398CF568C2971AE569910906F5B
lea rcx, [rbp + 0x4560]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4560]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent2A7611428D62805A3E4E5BC4103D82E4_E16F3AF852C0CB92002C8B8BAE928280
lea rcx, [rbp + 0x4580]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4580]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent30D802E0E248FEE17AAF4A62594CC75A
lea rcx, [rbp + 0x45a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x45a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent31A26C5EC85E51FC61BCE8F2051D94F1
lea rcx, [rbp + 0x45c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x45c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent34DA60AA966CD9270C5362E6AEF824CF
lea rcx, [rbp + 0x45e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x45e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent35DDEDF268117918D1D277A171D8DF7B_038EFFCE7B3AA51EA9EC061CB0C95C9B
lea rcx, [rbp + 0x4600]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4600]
call fcn.140001a58
push rsp
sbb edi, edi
dec dword [rax - 0x73]
adc eax, 0x184275
lea rcx, [rbp + 0x4620]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4620]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent35DDEDF268117918D1D277A171D8DF7B_EE6F1EAC22DA711DE5B1954547F69324
lea rcx, [rbp + 0x4640]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4640]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent35DDEDF268117918D1D277A171D8DF7B_F2203D7789A46E93B87123736CC6223B
lea rcx, [rbp + 0x4660]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4660]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent35DDEDF268117918D1D277A171D8DF7B_F9E059880B3A4FFC00A58C6C3FA2A764
lea rcx, [rbp + 0x4680]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4680]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent37570AF16029C559A6224EE4AF54691D
lea rcx, [rbp + 0x46a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x46a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent3781B4A3713292956206932165FA4132_29912A7EA9EDB60BB42BD5D9643E27BB
lea rcx, [rbp + 0x46c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x46c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent42B9A473B4DAF01285A36B4D3C7B1667
lea rcx, [rbp + 0x46e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x46e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent48B9B8FBCB37E882E11771D659F49E64
lea rcx, [rbp + 0x4700]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4700]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent4BD9E78A123D1E59F5B4B1218658C7D7
lea rcx, [rbp + 0x4720]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4720]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent5181D0A08D54A3F39F520C4F1D5634B9_7A774F3E6B03E6E63D07CE79D20936B9
lea rcx, [rbp + 0x4740]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4740]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent5181D0A08D54A3F39F520C4F1D5634B9_A6F4E9E4B5704703700D989C1EBA7A79
lea rcx, [rbp + 0x4760]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4760]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent5181D0A08D54A3F39F520C4F1D5634B9_A6F4E9E4B5704703700D989C1EBA7A79
lea rcx, [rbp + 0x4780]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4780]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent6D65C2F06B6F5BF87E0467C2B2F6F7B5
lea rcx, [rbp + 0x47a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x47a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent78BF5F4F62C7439F5A3D7DD9C5D04C53
lea rcx, [rbp + 0x47c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x47c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent78900D8FF3D3C65F8BF6F68D4376E01F
lea rcx, [rbp + 0x47e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x47e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent7B9677F5B6032E1E8179D91B28A4D28C_00A066DA207E7288DAF5E7D137CCF9B1
lea rcx, [rbp + 0x4800]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4800]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent7B9677F5B6032E1E8179D91B28A4D28C_1F118A038D9BD9F4A5289780403A5F36
lea rcx, [rbp + 0x4820]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4820]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent7B9677F5B6032E1E8179D91B28A4D28C_3E7D7BCAFEF18D2A7F8C4E53622A9DA6
lea rcx, [rbp + 0x4840]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4840]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent7B9677F5B6032E1E8179D91B28A4D28C_403DDCF5D74E82ACBFB4FBD3DA9E2A7F
lea rcx, [rbp + 0x4860]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4860]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent7B9677F5B6032E1E8179D91B28A4D28C_5A5F7C4A9DFBDC2CC20E8D9BC482BF28
lea rcx, [rbp + 0x4880]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4880]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent7B9677F5B6032E1E8179D91B28A4D28C_8C08A622DC58763B2BC8131E06740D09
lea rcx, [rbp + 0x48a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x48a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent7B9677F5B6032E1E8179D91B28A4D28C_B6C56C5B4F47D36AB951CE79575B4A5A
lea rcx, [rbp + 0x48c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x48c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent8F0DA4A34B1CF62215B7E890C79969E7_062E7C9D743EB2B7DD10A91B7C60AC44
lea rcx, [rbp + 0x48e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x48e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent8F0DA4A34B1CF62215B7E890C79969E7_5C8D990BD9F16A08B83DAF02CC4DD417
lea rcx, [rbp + 0x4900]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4900]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent8F0DA4A34B1CF62215B7E890C79969E7_98D7457F9E924CD501F14BD1BEF2CF5B
lea rcx, [rbp + 0x4920]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4920]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContent8F0DA4A34B1CF62215B7E890C79969E7_BD2A517BF891C63A674B2D9AEE6CFCB9
lea rcx, [rbp + 0x4940]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4940]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentBF98B339CE8D7E5E6315FEE20E48A7C1
lea rcx, [rbp + 0x4960]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4960]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentC4B72C6B0CC81DA7359B5445C99C59C0
lea rcx, [rbp + 0x4980]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4980]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentC5C51D893B8E9F03AA9C2E8217CCF93F
lea rcx, [rbp + 0x49a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x49a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentC9FBBF9E2A3D24BF1BCE4972D3D97C1F
lea rcx, [rbp + 0x49c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x49c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentD8BDB08E37049E4D4F4E1D6B2386A16D
lea rcx, [rbp + 0x49e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x49e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentE865BFAB470E0CEAE8A06C7119D34867
lea rcx, [rbp + 0x4a00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4a00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentE866BFAB470E0CEAE8A06C7119D34867
lea rcx, [rbp + 0x4a20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4a20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentEC30B91C9F7D499DB3B0D39DA0D69A52
lea rcx, [rbp + 0x4a40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4a40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentF05A462A3A8557BEB459AB1D0E4D1DF1
lea rcx, [rbp + 0x4a60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4a60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentF0936C238207E1E01A771C3B0C78168B
lea rcx, [rbp + 0x4a80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4a80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentF4F9F660B3E547779BEB7339A4A20DA4
lea rcx, [rbp + 0x4aa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4aa0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentF62794E750D7F490A72E7DA5C1DD5181
lea rcx, [rbp + 0x4ac0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4ac0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentF6D0261E0E99E4C5A540A7B2E2F5A9E3
lea rcx, [rbp + 0x4ae0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4ae0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentF7D32BE8618C7D674846D0F6654B5E0F
lea rcx, [rbp + 0x4b00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4b00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentF872F77D879DCE4880B879EAE3DD0DA7
lea rcx, [rbp + 0x4b20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4b20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentF8C085D8B0A7F529BFD2EAD0577330C8
lea rcx, [rbp + 0x4b40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4b40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentF8F424BBF3F0E5C8F2F4E8B05D634F52
lea rcx, [rbp + 0x4b60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4b60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentF9228B71D044A9B0B01CF9E14C0EB89D
lea rcx, [rbp + 0x4b80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4b80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentF926B2A6E9BDAA8297333E280C3579D7
lea rcx, [rbp + 0x4ba0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4ba0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentF926B2A6E9BDAA8297333E280C3579D7
lea rcx, [rbp + 0x4bc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4bc0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentF926B2A6E9BDAA8297333E280C3579D7
lea rcx, [rbp + 0x4be0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4be0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentF926B2A6E9BDAA8297333E280C3579D7
lea rcx, [rbp + 0x4c00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4c00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentEDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB
lea rcx, [rbp + 0x4c20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4c20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentEDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619
lea rcx, [rbp + 0x4c40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4c40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentEE44ECA143B76F2B9F2A5AA75B5D1EC6_847118BE2683F0C241D1D702F3A3F5F9
lea rcx, [rbp + 0x4c60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4c60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentFB0D848F74F70BB2EAA93746D24D9749
lea rcx, [rbp + 0x4c80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4c80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentFC5A820A001B41D68902E051F36A5282_27210AE28EDAA32FC1F9792B539700BA
lea rcx, [rbp + 0x4ca0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4ca0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentFC5A820A001B41D68902E051F36A5282_30F8F8C0684E9B26C5B7ECC90E452430
lea rcx, [rbp + 0x4cc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4cc0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentFC5A820A001B41D68902E051F36A5282_666C3DBCA853F752E4690AB5A4186625
lea rcx, [rbp + 0x4ce0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4ce0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentFC5A820A001B41D68902E051F36A5282_BE00DFD81F72ED1F2B653BB1FE4E0569
lea rcx, [rbp + 0x4d00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4d00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheContentFCDCF10A0D23347E9DFEEC8F8381DE71
lea rcx, [rbp + 0x4d20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4d20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData
lea rcx, [rbp + 0x4d40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4d40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData0177A2B8C3D6561744552D69E6BD54B0_5CE748556F479AAF2B2F68B8C4FFC921
lea rcx, [rbp + 0x4d60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4d60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData0255CEC2C51D081EFF40366512890989_030671A634A8767F1A3BDBEF73264BD6
lea rcx, [rbp + 0x4d80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4d80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData07CEF2F654E3ED6050FFC9B6EB844250_27F2F3EAE5ACF629E280F218628D1935
lea rcx, [rbp + 0x4da0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4da0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D
lea rcx, [rbp + 0x4dc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4dc0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData089915B119001793D7BF4EE252078087
lea rcx, [rbp + 0x4de0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4de0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData0972B7C417F696E06E186AEB26286F01_04451AA00A576F21A374E740D0AF7FCE
lea rcx, [rbp + 0x4e00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4e00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData0972B7C417F696E06E186AEB26286F01_04EE11A998985CD7A51904A574822082
lea rcx, [rbp + 0x4e20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4e20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData16452181C5FFFED5EC9E5598AF62236B
lea rcx, [rbp + 0x4e40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4e40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData1E11E75149C17A93653DA7DC0B8CF53F_23C03C7F20259C89EC80B04BB121BB9B
lea rcx, [rbp + 0x4e60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4e60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData1E11E75149C17A93653DA7DC0B8CF53F_81A542ACDA3B2CCD7E4BD57E47A4E768
lea rcx, [rbp + 0x4e80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4e80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData285248A5750721A9ACC886EF3622CE11_B581B398CF568C2971AE569910906F5B
lea rcx, [rbp + 0x4ea0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4ea0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData2A7611428D62805A3E4E5BC4103D82E4_E16F3AF852C0CB92002C8B8BAE928280
lea rcx, [rbp + 0x4ec0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4ec0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData30D802E0E248FEE17AAF4A62594CC75A
lea rcx, [rbp + 0x4ee0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4ee0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData31A26C5EC85E51FC61BCE8F2051D94F1
lea rcx, [rbp + 0x4f00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4f00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData34DA60AA966CD9270C5362E6AEF824CF
lea rcx, [rbp + 0x4f20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4f20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData391063E6F49C9F8E75F1D67BF77F8B00
lea rcx, [rbp + 0x4f40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4f40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData3C40702E8D636B7F009E042E3C65C12C
lea rcx, [rbp + 0x4f60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4f60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData40A5CC8DB63CC737E8A8C89A4D046E05
lea rcx, [rbp + 0x4f80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4f80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData4CE9F17D4DFBCB8C568C4101EC91DD4C
lea rcx, [rbp + 0x4fa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4fa0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData4CE9F17D4DFBCB8C568C4101EC91DD4C
lea rcx, [rbp + 0x4fc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4fc0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData5BA9A8E9140C307D0D97B9D2093F6C54
lea rcx, [rbp + 0x4fe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x4fe0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData6316D75DCE91E235D6CF7B05E50A0195
lea rcx, [rbp + 0x5000]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5000]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData6E4E062CCDAC118B2754BDDE6A2A9DB3
lea rcx, [rbp + 0x5020]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5020]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData73C9E0D36CE35F7A018E14DD65B7D813
lea rcx, [rbp + 0x5040]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5040]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData77C1CFAEF90C80F897EFCC9A4C54CE5B
lea rcx, [rbp + 0x5060]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5060]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData7C03D5B98BF2D62F7B01E7E5B4A0CC9B
lea rcx, [rbp + 0x5080]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5080]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData7D6C6F52A6079AFC37E8BF7C9CFAB73F
lea rcx, [rbp + 0x50a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData82B39C9F4A7B6CE68B4B4AC92C57C2C2
lea rcx, [rbp + 0x50c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData83BE5E6A79AC5F0EBD16AEF6D3F8BD86
lea rcx, [rbp + 0x50e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x50e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData8C497DAB7D10A60D78895E5EC943E30E
lea rcx, [rbp + 0x5100]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5100]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData8D09B69983D2337E5BD8F96D1E279FE5
lea rcx, [rbp + 0x5120]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5120]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData8E57450AC489D54F1B4DCA06AB47F0D1
lea rcx, [rbp + 0x5140]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5140]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaData9AD21EC15E2F572B30A7EAEAB451D6F7
lea rcx, [rbp + 0x5160]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5160]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataA42F072AE742B458C1A83C31F1F569C3
lea rcx, [rbp + 0x5180]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5180]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataA8E7A133ED6A391FAC46EAA160E4A82E
lea rcx, [rbp + 0x51a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x51a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataB0E4F17E1AB8A03C49C61B47A29ABDC7
lea rcx, [rbp + 0x51c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x51c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataB113BC13F9258DCCB37844715CCB3A94
lea rcx, [rbp + 0x51e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x51e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataB49E7EAE6390078D07664F4CE88CF9F9
lea rcx, [rbp + 0x5200]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5200]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataB6ABAB7993C82B4A95B97BC85BC44E2D
lea rcx, [rbp + 0x5220]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5220]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataB76E7F7C7D92536E3A2257C3190247F1
lea rcx, [rbp + 0x5240]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5240]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataBE95D98F3F97DF09C40C7FF23D2C7C02
lea rcx, [rbp + 0x5260]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5260]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataBF8753C3F8E9FCEDAA4899D6C928C95D
lea rcx, [rbp + 0x5280]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5280]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataC0E31E7A13C01D76CE52BF2E37817D15
lea rcx, [rbp + 0x52a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x52a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataC0E31E7A13C01D76CE52BF2E37817D15
lea rcx, [rbp + 0x52c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x52c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataC92E5B18A81EC2F4696CBE2CCB14F6E7
lea rcx, [rbp + 0x52e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x52e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCE5B6B9D040B9B1A5A0B1D8B65CF9308
lea rcx, [rbp + 0x5300]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5300]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCF08BC5C4E98B2E55F2F6F4DA418D1F5
lea rcx, [rbp + 0x5320]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5320]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCFD98CF5F4B70D4CC04203BD92DD4B56
lea rcx, [rbp + 0x5340]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5340]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataD28F8FF2D45B0323B9E88CCEF1741DF8
lea rcx, [rbp + 0x5360]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5360]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataD69F9E1BC41B426FD2B080DA2DD5CF41
lea rcx, [rbp + 0x5380]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5380]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataD9C565D709BF637BD6FF4939A9D4CC2D
lea rcx, [rbp + 0x53a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x53a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataDA47ED8C89B5AA8CE621D9F295D4D03B
lea rcx, [rbp + 0x53c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x53c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataE0DFF19F62222CCB5571DFB3FF54EAD1
lea rcx, [rbp + 0x53e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x53e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataE2E0AB9BF509C683DA7ACB8DD4D0C6E4
lea rcx, [rbp + 0x5400]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5400]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataE8A873D9BBA582DBF0AA7876D79919CC
lea rcx, [rbp + 0x5420]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5420]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataEA97C3CF94A82E4D7F9067D1A5C6BFA5
lea rcx, [rbp + 0x5440]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5440]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataEB7C0E3E49D20A9D41856B0A89D0E1BD
lea rcx, [rbp + 0x5460]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5460]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataEC0F95D6DAF0C9B7B83F5862DD26E1D6
lea rcx, [rbp + 0x5480]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5480]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataEE98A4F73BC9C3C1D6C0BCF1F6D6E5F7
lea rcx, [rbp + 0x54a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x54a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataF3C89C8D4C9F2E5AAB287B4F5D92A8F0
lea rcx, [rbp + 0x54c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x54c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataF9B5442FEC8B775D4A7BCB1A64D98E8F
lea rcx, [rbp + 0x54e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x54e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataFDD40E0F24F85EE9AA3B7C84B74E38EE
lea rcx, [rbp + 0x5500]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5500]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataFDF2DF430EE027B7BF8B0D8D907E272E
lea rcx, [rbp + 0x5520]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5520]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataFE6CE7C88AABAB79EB4768AA46CF0216
lea rcx, [rbp + 0x5540]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5540]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataC14EF41B12D2E3FC98A6E6C6AAEDB98F
lea rcx, [rbp + 0x5560]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5560]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataC46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE
lea rcx, [rbp + 0x5580]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5580]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCA4458E7366E94A3C3A9C1FE548B6D21_82F29F3EF954016E2EAA30E22D51F9AE
lea rcx, [rbp + 0x55a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x55a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCA4458E7366E94A3C3A9C1FE548B6D21_E3E8071A1C20C155909CE13A3ED7AA80
lea rcx, [rbp + 0x55c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x55c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCC197601BE0898B7B0FCC91FA15D8A69_0C57167C464797F7BC04ABE7E7FE1045
lea rcx, [rbp + 0x55e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x55e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCC197601BE0898B7B0FCC91FA15D8A69_1367D6CAC3B6E75E25E2E7E3E2CC25AA
lea rcx, [rbp + 0x5600]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5600]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCC197601BE0898B7B0FCC91FA15D8A69_2B97314CE5943848C0DFBEA5CCA10011
lea rcx, [rbp + 0x5620]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5620]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCC197601BE0898B7B0FCC91FA15D8A69_5AEAAF5F184615573AAB34B898B32E58
lea rcx, [rbp + 0x5640]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5640]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCC197601BE0898B7B0FCC91FA15D8A69_758786208F1CEB4AAFBDCB3FA4A59754
lea rcx, [rbp + 0x5660]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5660]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCC197601BE0898B7B0FCC91FA15D8A69_81566544DFBE5400FD86C38E8E987BF4
lea rcx, [rbp + 0x5680]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5680]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCC197601BE0898B7B0FCC91FA15D8A69_837A0010DA5A648BE322B702015A9E91
lea rcx, [rbp + 0x56a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x56a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCC197601BE0898B7B0FCC91FA15D8A69_8EAD27B819DF8B4C5C4FF19A4C07EA80
lea rcx, [rbp + 0x56c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x56c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCC197601BE0898B7B0FCC91FA15D8A69_982D5E192D42C6345564548338F5DE54
lea rcx, [rbp + 0x56e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x56e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCC197601BE0898B7B0FCC91FA15D8A69_BF2C61084B800115ADEB197CBA1F1AC8
lea rcx, [rbp + 0x5700]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5700]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCC197601BE0898B7B0FCC91FA15D8A69_FC361BBD46D38B8D53C8F7064E1947CE
lea rcx, [rbp + 0x5720]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5720]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataCFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B
lea rcx, [rbp + 0x5740]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5740]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataD84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7
lea rcx, [rbp + 0x5760]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5760]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataDA3B6E45325D5FFF28CF6BAD6065C907_BB48CA9838349E20FCB601A27952B68B
lea rcx, [rbp + 0x5780]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5780]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataE0F5C59F9FA661F6F4C50B87FEF3A15A
lea rcx, [rbp + 0x57a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x57a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataE49827401028F7A0F97B5576C77A26CB_7CE95D8DCA26FE957E7BD7D76F353B08
lea rcx, [rbp + 0x57c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x57c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataEA618097E393409AFA316F0F87E2C202_BEF5BD13CF5F13F6FF3D15BBADC93CE5
lea rcx, [rbp + 0x57e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x57e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataED4BB5A4FB07498CF46CB30D073D2D5F
lea rcx, [rbp + 0x5800]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5800]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataF179C7B0ABF7C84F22C67A1B6B55B14D_7BF64DCD15C3D7F7277E79E6D907DA3E
lea rcx, [rbp + 0x5820]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5820]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataF179C7B0ABF7C84F22C67A1B6B55B14D_FF3794C07DD37287B73DF5DCA30B89EE
lea rcx, [rbp + 0x5840]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5840]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataF23B4C9BC23C9359E13D7710B505DC62
lea rcx, [rbp + 0x5860]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5860]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataF9B60F4E4845E2FBD5C548F45E6D9CF8
lea rcx, [rbp + 0x5880]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5880]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataF9B60F4E4845E2FBD5C548F45E6D9CF8
lea rcx, [rbp + 0x58a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x58a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_Users_username_AppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataF9B60F4E4845E2FBD5C548F45E6D9CF8
lea rcx, [rbp + 0x58c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x58c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFiaLPSS2i_GPIO2_SKL.PNF
lea rcx, [rbp + 0x58e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x58e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFiaLPSS2i_I2C_BXT_P.PNF
lea rcx, [rbp + 0x5900]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5900]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFiaLPSS2i_I2C_CNL.PNF
lea rcx, [rbp + 0x5920]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5920]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFiaLPSS2i_I2C_GLK.PNF
lea rcx, [rbp + 0x5940]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5940]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFiaLPSS2i_I2C_SKL.PNF
lea rcx, [rbp + 0x5960]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5960]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFialpssi_gpio.PNF
lea rcx, [rbp + 0x5980]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5980]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFialpssi_i2c.PNF
lea rcx, [rbp + 0x59a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x59a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFiastorav.PNF
lea rcx, [rbp + 0x59c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x59c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFiastorv.PNF
lea rcx, [rbp + 0x59e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x59e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFinput.PNF
lea rcx, [rbp + 0x5a00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5a00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFintelpep.PNF
lea rcx, [rbp + 0x5a20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5a20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFintelpmax.PNF
lea rcx, [rbp + 0x5a40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5a40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFiscsi.PNF
lea rcx, [rbp + 0x5a60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5a60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFkdnic.PNF
lea rcx, [rbp + 0x5a80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5a80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFks.PNF
lea rcx, [rbp + 0x5aa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5aa0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFksfilter.PNF
lea rcx, [rbp + 0x5ac0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5ac0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsINFLSM0000
lea rcx, [rbp + 0x5ae0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5ae0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFLSM0000lagcounterdef.ini
lea rcx, [rbp + 0x5b00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5b00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFLSMlagcounterdef.h
lea rcx, [rbp + 0x5b20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5b20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmachine.PNF
lea rcx, [rbp + 0x5b40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5b40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmausbhost.PNF
lea rcx, [rbp + 0x5b60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5b60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmdmbtmdm.PNF
lea rcx, [rbp + 0x5b80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5b80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmemory.PNF
lea rcx, [rbp + 0x5ba0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5ba0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmicrosoft_bluetooth_a2dp.PNF
lea rcx, [rbp + 0x5bc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5bc0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmicrosoft_bluetooth_avrcptransport.PNF
lea rcx, [rbp + 0x5be0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5be0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmicrosoft_bluetooth_hfp.PNF
lea rcx, [rbp + 0x5c00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5c00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmlx4_bus.PNF
lea rcx, [rbp + 0x5c20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5c20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmonitor.PNF
lea rcx, [rbp + 0x5c40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5c40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmsgpiowin32.PNF
lea rcx, [rbp + 0x5c60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5c60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmshdc.PNF
lea rcx, [rbp + 0x5c80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5c80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmsmouse.PNF
lea rcx, [rbp + 0x5ca0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5ca0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmsports.PNF
lea rcx, [rbp + 0x5cc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5cc0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmssmbios.PNF
lea rcx, [rbp + 0x5ce0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5ce0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFmtconfig.PNF
lea rcx, [rbp + 0x5d00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5d00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_ndisvirtualbus.PNF
lea rcx, [rbp + 0x5d20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5d20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_netbvbda.PNF
lea rcx, [rbp + 0x5d40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5d40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_netevbda.PNF
lea rcx, [rbp + 0x5d60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5d60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_npsvctrig.PNF
lea rcx, [rbp + 0x5d80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5d80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_nvdimm.PNF
lea rcx, [rbp + 0x5da0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5da0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem0.inf
lea rcx, [rbp + 0x5dc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5dc0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem0.PNF
lea rcx, [rbp + 0x5de0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5de0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem1.inf
lea rcx, [rbp + 0x5e00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5e00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem1.PNF
lea rcx, [rbp + 0x5e20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5e20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem2.inf
lea rcx, [rbp + 0x5e40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5e40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem2.PNF
lea rcx, [rbp + 0x5e60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5e60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem3.inf
lea rcx, [rbp + 0x5e80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5e80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem3.PNF
lea rcx, [rbp + 0x5ea0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5ea0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem4.inf
lea rcx, [rbp + 0x5ec0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5ec0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem4.PNF
lea rcx, [rbp + 0x5ee0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5ee0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem5.inf
lea rcx, [rbp + 0x5f00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5f00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem5.PNF
lea rcx, [rbp + 0x5f20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5f20]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem6.inf
lea rcx, [rbp + 0x5f40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5f40]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem6.PNF
lea rcx, [rbp + 0x5f60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5f60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem7.inf
lea rcx, [rbp + 0x5f80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5f80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem7.PNF
lea rcx, [rbp + 0x5fa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5fa0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem8.inf
lea rcx, [rbp + 0x5fc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5fc0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem8.PNF
lea rcx, [rbp + 0x5fe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x5fe0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem9.inf
lea rcx, [rbp + 0x6000]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6000]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem9.PNF
lea rcx, [rbp + 0x6020]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6020]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFoem10.inf
lea rcx, [rbp + 0x6040]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6040]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_stornvme.PNF
lea rcx, [rbp + 0x6060]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6060]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_storufs.PNF
lea rcx, [rbp + 0x6080]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6080]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_swenum.PNF
lea rcx, [rbp + 0x60a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_tdibth.PNF
lea rcx, [rbp + 0x60c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_termmou.PNF
lea rcx, [rbp + 0x60e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x60e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_tpm.PNF
lea rcx, [rbp + 0x6100]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6100]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_tsgenericusbdriver.PNF
lea rcx, [rbp + 0x6120]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6120]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_tsusbhub.PNF
lea rcx, [rbp + 0x6140]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6140]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFuaspstor.PNF
lea rcx, [rbp + 0x6160]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6160]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFUcmUcsiAcpiClient.PNF
lea rcx, [rbp + 0x6180]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6180]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFuefi.PNF
lea rcx, [rbp + 0x61a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x61a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFufxchipidea.PNF
lea rcx, [rbp + 0x61c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x61c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFufxsynopsys.PNF
lea rcx, [rbp + 0x61e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x61e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFumbus.PNF
lea rcx, [rbp + 0x6200]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6200]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFumpass.PNF
lea rcx, [rbp + 0x6220]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6220]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFurschipidea.PNF
lea rcx, [rbp + 0x6240]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6240]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFurssynopsys.PNF
lea rcx, [rbp + 0x6260]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6260]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFusb.PNF
lea rcx, [rbp + 0x6280]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6280]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFusbaudio2.PNF
lea rcx, [rbp + 0x62a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x62a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFusbcir.PNF
lea rcx, [rbp + 0x62c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x62c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFusbhub3.PNF
lea rcx, [rbp + 0x62e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x62e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFusbport.PNF
lea rcx, [rbp + 0x6300]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6300]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFusbprint.PNF
lea rcx, [rbp + 0x6320]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6320]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFusbser.PNF
lea rcx, [rbp + 0x6340]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6340]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFusbstor.PNF
lea rcx, [rbp + 0x6360]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6360]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFusbxhci.PNF
lea rcx, [rbp + 0x6380]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6380]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_vdrvroot.PNF
lea rcx, [rbp + 0x63a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x63a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_virtdisk.PNF
lea rcx, [rbp + 0x63c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x63c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_volmgr.PNF
lea rcx, [rbp + 0x63e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x63e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_volsnap.PNF
lea rcx, [rbp + 0x6400]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6400]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_volume.PNF
lea rcx, [rbp + 0x6420]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6420]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINF_vstxraid.PNF
lea rcx, [rbp + 0x6440]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6440]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFwdmaudio.PNF
lea rcx, [rbp + 0x6460]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6460]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFwdma_usb.PNF
lea rcx, [rbp + 0x6480]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6480]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFwgencounter.PNF
lea rcx, [rbp + 0x64a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x64a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFWindowsTrustedRTProxy.PNF
lea rcx, [rbp + 0x64c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x64c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFwinusb.PNF
lea rcx, [rbp + 0x64e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x64e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFwmiacpi.PNF
lea rcx, [rbp + 0x6500]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6500]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsINFWmiApRpl
lea rcx, [rbp + 0x6520]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6520]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsINFWmiApRpl0009
lea rcx, [rbp + 0x6540]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6540]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFWmiApRpl0009WmiApRpl.ini
lea rcx, [rbp + 0x6560]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6560]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFWmiApRplWmiApRpl.h
lea rcx, [rbp + 0x6580]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6580]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFWmiApRplWmiApRpl.ini
lea rcx, [rbp + 0x65a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x65a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFwstorflt.PNF
lea rcx, [rbp + 0x65c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x65c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFwvid.PNF
lea rcx, [rbp + 0x65e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x65e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFwvmbus.PNF
lea rcx, [rbp + 0x6600]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6600]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFwvmgid.PNF
lea rcx, [rbp + 0x6620]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6620]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFwvpci.PNF
lea rcx, [rbp + 0x6640]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6640]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFxboxgip.PNF
lea rcx, [rbp + 0x6660]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6660]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsINFxinputhid.PNF
lea rcx, [rbp + 0x6680]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6680]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsLogsCBS
lea rcx, [rbp + 0x66a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x66a0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsLogsCBSCBS.log
lea rcx, [rbp + 0x66c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x66c0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsLogsCBSCBS.persist.log
lea rcx, [rbp + 0x66e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x66e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsTemp
lea rcx, [rbp + 0x6700]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6700]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSoftwareDistributionDownload
lea rcx, [rbp + 0x6720]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6720]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionDownload.
lea rcx, [rbp + 0x6740]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6740]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionDataStore.
lea rcx, [rbp + 0x6760]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6760]
call fcn.140001a58
lea rdx, str._del__s__f__a:h__a:a__q__systemdrive_WindowsSoftwareDistributionReportingEvents.log
lea rcx, [rbp + 0x6780]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6780]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSoftwareDistributionDataStore
lea rcx, [rbp + 0x67a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x67a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSoftwareDistributionDownload
lea rcx, [rbp + 0x67c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x67c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSoftwareDistributionUpdateSession
lea rcx, [rbp + 0x67e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x67e0]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchD3D9TEST.EXE_1B86F3FC.pf
lea rcx, [rbp + 0x6800]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6800]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchGET_GRAPHICS_OFFSETS64.EXE_2BCB2EA4.pf
lea rcx, [rbp + 0x6820]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6820]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchGET_GRAPHICS_OFFSETS32.EXE_D4C865E3.pf
lea rcx, [rbp + 0x6840]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6840]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchOBS_FFMPEG_MUX.EXE_1C01271A.pf
lea rcx, [rbp + 0x6860]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6860]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchOBS_FFMPEG_MUX.EXE_1C01271A.pf
lea rcx, [rbp + 0x6880]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6880]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalUnrealEngine
lea rcx, [rbp + 0x68a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x68a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedLogs
lea rcx, [rbp + 0x68c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x68c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStorage
lea rcx, [rbp + 0x68e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x68e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheGPUCache
lea rcx, [rbp + 0x6900]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6900]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalFortniteGameSavedConfigWindowsClient
lea rcx, [rbp + 0x6920]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6920]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDir
lea rcx, [rbp + 0x6940]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6940]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalFortniteGameSavedLMS
lea rcx, [rbp + 0x6960]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6960]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalFortniteGameSavedCloud
lea rcx, [rbp + 0x6980]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6980]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Recovery_ntuser.sys
lea rcx, [rbp + 0x69a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x69a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_UsersPublicLibrariescollection.dat
lea rcx, [rbp + 0x69c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x69c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_MSOCache71230000_00E2_0000_1000_00000000Setup.dat
lea rcx, [rbp + 0x69e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x69e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsWebCache
lea rcx, [rbp + 0x6a00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6a00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftFeeds
lea rcx, [rbp + 0x6a20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6a20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFiNetworksCache
lea rcx, [rbp + 0x6a40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6a40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDataMartPaidWiFiRules
lea rcx, [rbp + 0x6a60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6a60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistoryHistory.IE5
lea rcx, [rbp + 0x6a80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6a80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalSpeech_GraphicsCarnival
lea rcx, [rbp + 0x6aa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6aa0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsWERTemp
lea rcx, [rbp + 0x6ac0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6ac0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalMicrosoftWindowsINetCacheContent.IE5
lea rcx, [rbp + 0x6ae0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6ae0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalMicrosoftWindowsINetCookies
lea rcx, [rbp + 0x6b00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6b00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheMetaData
lea rcx, [rbp + 0x6b20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6b20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSysWOW64config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheContent
lea rcx, [rbp + 0x6b40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6b40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftWindowsWERTemp
lea rcx, [rbp + 0x6b60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6b60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files
lea rcx, [rbp + 0x6b80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6b80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSoftwareDistributionDataStoreLogs
lea rcx, [rbp + 0x6ba0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6ba0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweTempState
lea rcx, [rbp + 0x6bc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6bc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataRoamingEasyAntiCheat
lea rcx, [rbp + 0x6be0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6be0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheGPUCache
lea rcx, [rbp + 0x6c00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6c00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweLocalCache
lea rcx, [rbp + 0x6c20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6c20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Program_Files__x86_Common_FilesBattlEye
lea rcx, [rbp + 0x6c40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6c40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftOneDrive_settingsPersonal
lea rcx, [rbp + 0x6c60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6c60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalFortniteGameSavedCloud9f92640e32874a76bb46156d11ae5fcf_
lea rcx, [rbp + 0x6c80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6c80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataAMDPPC_apprecord.csv_
lea rcx, [rbp + 0x6ca0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6ca0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyAppDataIndexed_DB
lea rcx, [rbp + 0x6cc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6cc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDiagnosisEventStore.db_wal
lea rcx, [rbp + 0x6ce0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6ce0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDiagnosisDownloadedSettings
lea rcx, [rbp + 0x6d00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6d00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDiagnosisEventStore.db_wal
lea rcx, [rbp + 0x6d20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6d20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEAW1C2HQS_
lea rcx, [rbp + 0x6d40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6d40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTempVSRemoteControlefe1e93f8bdd406aa6f0a42171c129a4
lea rcx, [rbp + 0x6d60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6d60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTempVSRemoteControl282fb338dbd04a7fbe725354ebc71bdf
lea rcx, [rbp + 0x6d80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6d80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTempVSRemoteControlefe1e93f8bdd406aa6f0a42171c129a4
lea rcx, [rbp + 0x6da0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6da0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSystem32LogFilesWMIRtBackup
lea rcx, [rbp + 0x6dc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6dc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalFortniteGameSavedCloud9f92640e32874a76bb46156d11ae5fcf_
lea rcx, [rbp + 0x6de0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6de0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataAMDPPC_apprecord.csv_
lea rcx, [rbp + 0x6e00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6e00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyAppDataIndexed_DB
lea rcx, [rbp + 0x6e20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6e20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDiagnosisEventStore.db_wal
lea rcx, [rbp + 0x6e40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6e40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDiagnosisDownloadedSettings
lea rcx, [rbp + 0x6e60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6e60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDiagnosisEventStore.db_wal
lea rcx, [rbp + 0x6e80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6e80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEAW1C2HQS_
lea rcx, [rbp + 0x6ea0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6ea0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTempVSRemoteControlefe1e93f8bdd406aa6f0a42171c129a4
lea rcx, [rbp + 0x6ec0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6ec0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTempVSRemoteControl282fb338dbd04a7fbe725354ebc71bdf
lea rcx, [rbp + 0x6ee0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6ee0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTempVSRemoteControlefe1e93f8bdd406aa6f0a42171c129a4
lea rcx, [rbp + 0x6f00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6f00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSystem32LogFilesWMIRtBackup
lea rcx, [rbp + 0x6f20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6f20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalFortniteGameSavedCloud9f92640e32874a76bb46156d11ae5fcf_
lea rcx, [rbp + 0x6f40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6f40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataAMDPPC_apprecord.csv_
lea rcx, [rbp + 0x6f60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6f60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyAppDataIndexed_DB
lea rcx, [rbp + 0x6f80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6f80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDiagnosisEventStore.db_wal
lea rcx, [rbp + 0x6fa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6fa0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDiagnosisDownloadedSettings
lea rcx, [rbp + 0x6fc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6fc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDiagnosisEventStore.db_wal
lea rcx, [rbp + 0x6fe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x6fe0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEAW1C2HQS_
lea rcx, [rbp + 0x7000]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7000]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTempVSRemoteControlefe1e93f8bdd406aa6f0a42171c129a4
lea rcx, [rbp + 0x7020]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7020]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTempVSRemoteControl282fb338dbd04a7fbe725354ebc71bdf
lea rcx, [rbp + 0x7040]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7040]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTempVSRemoteControlefe1e93f8bdd406aa6f0a42171c129a4
lea rcx, [rbp + 0x7060]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7060]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSystem32LogFilesWMIRtBackup
lea rcx, [rbp + 0x7080]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7080]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalFortniteGameSavedCloud9f92640e32874a76bb46156d11ae5fcf_
lea rcx, [rbp + 0x70a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x70a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataAMDPPC_apprecord.csv_
lea rcx, [rbp + 0x70c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x70c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyAppDataIndexed_DB
lea rcx, [rbp + 0x70e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x70e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDiagnosisEventStore.db_wal
lea rcx, [rbp + 0x7100]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7100]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDiagnosisDownloadedSettings
lea rcx, [rbp + 0x7120]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7120]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_ProgramDataMicrosoftDiagnosisEventStore.db_wal
lea rcx, [rbp + 0x7140]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7140]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCacheIEAW1C2HQS_
lea rcx, [rbp + 0x7160]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7160]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTempVSRemoteControlefe1e93f8bdd406aa6f0a42171c129a4
lea rcx, [rbp + 0x7180]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7180]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTempVSRemoteControl282fb338dbd04a7fbe725354ebc71bdf
lea rcx, [rbp + 0x71a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x71a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_Users_username_AppDataLocalTempVSRemoteControlefe1e93f8bdd406aa6f0a42171c129a4
lea rcx, [rbp + 0x71c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x71c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__systemdrive_WindowsSystem32LogFilesWMIRtBackup
lea rcx, [rbp + 0x71e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x71e0]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchATTRIB.EXE_58A07CAF.pf
lea rcx, [rbp + 0x7200]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7200]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchAgRobust.db
lea rcx, [rbp + 0x7220]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7220]
call fcn.140001a58
lea rdx, str.del_C:Users_username_AppDataLocalMicrosoftFeeds_Cache
lea rcx, [rbp + 0x7240]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7240]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchCEPHTMLENGINE.EXE_E15640BA.pf
lea rcx, [rbp + 0x7260]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7260]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchCMD.EXE_0BD30981.pf
lea rcx, [rbp + 0x7280]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7280]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchCLIPUP.EXE_4C5C7B66.pf
lea rcx, [rbp + 0x72a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x72a0]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchD3D9TEST.EXE_1B86F3FC.pf
lea rcx, [rbp + 0x72c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x72c0]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchGET_GRAPHICS_OFFSETS64.EXE_2BCB2EA4.pf
lea rcx, [rbp + 0x72e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x72e0]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchGET_GRAPHICS_OFFSETS32.EXE_D4C865E3.pf
lea rcx, [rbp + 0x7300]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7300]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchOBS_FFMPEG_MUX.EXE_1C01271A.pf
lea rcx, [rbp + 0x7320]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7320]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchOBS_FFMPEG_MUX.EXE_1C01271A.pf
lea rcx, [rbp + 0x7340]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7340]
call fcn.140001a58
lea rdx, str.vssadmin_delete_shadows__All__Quiet
lea rcx, [rbp + 0x7360]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7360]
call fcn.140001a58
lea rdx, str.netsh_winsock_reset
lea rcx, [rbp + 0x7380]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7380]
call fcn.140001a58
lea rdx, str.netsh_winsock_reset_catalog
lea rcx, [rbp + 0x73a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x73a0]
call fcn.140001a58
lea rdx, str.netsh_int_ip_reset
lea rcx, [rbp + 0x73c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x73c0]
call fcn.140001a58
lea rdx, str.netsh_advfirewall_reset
lea rcx, [rbp + 0x73e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x73e0]
call fcn.140001a58
lea rdx, str.netsh_int_reset_all
lea rcx, [rbp + 0x7400]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7400]
call fcn.140001a58
lea rdx, str.netsh_int_ipv4_reset
lea rcx, [rbp + 0x7420]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7420]
call fcn.140001a58
lea rdx, str.netsh_int_ipv6_reset
lea rcx, [rbp + 0x7440]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7440]
call fcn.140001a58
lea rdx, str.ipconfig__release
lea rcx, [rbp + 0x7460]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7460]
call fcn.140001a58
lea rdx, str.ipconfig__renew
lea rcx, [rbp + 0x7480]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7480]
call fcn.140001a58
lea rdx, str.ipconfig__flushdns
lea rcx, [rbp + 0x74a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x74a0]
call fcn.140001a58
lea rdx, str.C:Program_Files__x86_Epic_GamesLauncherEngineConfigBase.ini
lea rcx, [rsp + 0x20]
call fcn.14001be08
nop
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x74c0]
call fcn.140006274
mov rcx, rax
call fcn.1400048c4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x74c0]
call fcn.1400048d4
nop
lea rcx, [rsp + 0x20]
call fcn.1400048d4
lea rdx, str.C:Program_Files__x86_Epic_GamesLauncherEngineConfigBaseGame.ini
lea rcx, [rsp + 0x40]
call fcn.14001be08
nop
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x74e0]
call fcn.140006274
mov rcx, rax
call fcn.1400048c4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x74e0]
call fcn.1400048d4
nop
lea rcx, [rsp + 0x40]
call fcn.1400048d4
lea rdx, str.C:Program_Files__x86_Epic_GamesLauncherEngineConfigWindowsWindowsGame.ini
lea rcx, [rsp + 0x60]
call fcn.14001be08
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x7500]
call fcn.140006274
mov rcx, rax
call fcn.1400048c4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x7500]
call fcn.1400048d4
nop
lea rcx, [rsp + 0x60]
call fcn.1400048d4
lea rdx, str.C:Program_Files__x86_Epic_GamesLauncherEngineConfigBaseInput.ini
lea rcx, [rbp - 0x80]
call fcn.14001be08
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x7520]
call fcn.140006274
mov rcx, rax
call fcn.1400048c4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x7520]
call fcn.1400048d4
nop
lea rcx, [rbp - 0x80]
call fcn.1400048d4
lea rdx, str.C:Program_Files__x86_Epic_GamesLauncherPortalConfigUserLightmass.ini
lea rcx, [rbp - 0x60]
call fcn.14001be08
nop
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x7540]
call fcn.140006274
mov rcx, rax
call fcn.1400048c4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x7540]
call fcn.1400048d4
nop
lea rcx, [rbp - 0x60]
call fcn.1400048d4
lea rdx, str.C:Program_Files__x86_Epic_GamesLauncherEngineConfigWindowsBaseWindowsLightmass.ini
lea rcx, [rbp - 0x40]
call fcn.14001be08
nop
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x7560]
call fcn.140006274
mov rcx, rax
call fcn.1400048c4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x7560]
call fcn.1400048d4
nop
lea rcx, [rbp - 0x40]
call fcn.1400048d4
lea rdx, str.C:Program_Files__x86_Epic_GamesLauncherPortalConfigUserScalability.ini
lea rcx, [rbp - 0x20]
call fcn.14001be08
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x7580]
call fcn.140006274
mov rcx, rax
call fcn.1400048c4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x7580]
call fcn.1400048d4
nop
lea rcx, [rbp - 0x20]
call fcn.1400048d4
lea rdx, str.C:Program_Files__x86_Epic_GamesLauncherEngineConfigBaseHardware.ini
lea rcx, [rbp]
call fcn.14001be08
nop
lea rdx, [rbp]
lea rcx, [rbp + 0x75a0]
call fcn.140006274
mov rcx, rax
call fcn.1400048c4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x75a0]
call fcn.1400048d4
nop
lea rcx, [rbp]
call fcn.1400048d4
lea rdx, str.C:Program_Files__x86_Epic_GamesLauncherPortalConfigNotForLicenseesWindowsWindowsHardware.ini
lea rcx, [rbp + 0x20]
call fcn.14001be08
nop
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x75c0]
call fcn.140006274
mov rcx, rax
call fcn.1400048c4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x75c0]
call fcn.1400048d4
nop
lea rcx, [rbp + 0x20]
call fcn.1400048d4
lea rdx, str.netsh_winsock_reset
lea rcx, [rbp + 0x75e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x75e0]
call fcn.140001a58
lea rdx, str.netsh_winsock_reset_catalog
lea rcx, [rbp + 0x7600]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7600]
call fcn.140001a58
lea rdx, str.netsh_int_ip_reset
lea rcx, [rbp + 0x7620]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7620]
call fcn.140001a58
lea rdx, str.netsh_advfirewall_reset
lea rcx, [rbp + 0x7640]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7640]
call fcn.140001a58
lea rdx, str.netsh_int_reset_all
lea rcx, [rbp + 0x7660]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7660]
call fcn.140001a58
lea rdx, str.netsh_int_ipv4_reset
lea rcx, [rbp + 0x7680]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7680]
call fcn.140001a58
lea rdx, str.netsh_int_ipv6_reset
lea rcx, [rbp + 0x76a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x76a0]
call fcn.140001a58
lea rdx, str.ipconfig___release
lea rcx, [rbp + 0x76c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x76c0]
call fcn.140001a58
lea rdx, str.ipconfig___renew
lea rcx, [rbp + 0x76e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x76e0]
call fcn.140001a58
lea rdx, str.ipconfig___flushdns
lea rcx, [rbp + 0x7700]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7700]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREWOW6432NodeEasyAntiCheat__f
lea rcx, [rbp + 0x7720]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7720]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSYSTEMControlSet001ServicesEasyAntiCheat__f
lea rcx, [rbp + 0x7740]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7740]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSYSTEMControlSet001ServicesBEService__f
lea rcx, [rbp + 0x7760]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7760]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSYSTEMControlSet001EnumDISPLAYACR06A7__f
lea rcx, [rbp + 0x7780]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7780]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSYSTEMControlSet001EnumDISPLAYPHLC0B1__f
lea rcx, [rbp + 0x77a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x77a0]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSYSTEMCurrentControlSetControlGraphicsDriversConfiguration__f
lea rcx, [rbp + 0x77c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x77c0]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSYSTEMCurrentControlSetControlGraphicsDriversConnectivity__f
lea rcx, [rbp + 0x77e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x77e0]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSystemCurrentControlSetControlTimeZoneInformation__f
lea rcx, [rbp + 0x7800]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7800]
call fcn.140001a58
lea rdx, [0x14019cfd0]
lea rcx, [rbp + 0x7820]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7820]
call fcn.140001a58
lea rdx, [0x14019d0b0]
lea rcx, [rbp + 0x7840]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7840]
call fcn.140001a58
lea rdx, [0x14019d100]
lea rcx, [rbp + 0x7860]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7860]
call fcn.140001a58
lea rdx, [0x14019d1b0]
lea rcx, [rbp + 0x7880]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7880]
call fcn.140001a58
lea rdx, [0x14019d230]
lea rcx, [rbp + 0x78a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x78a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate__v_SusClientId__t_REG_SZ__d__random__random___random___random___random___f
lea rcx, [rbp + 0x78c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x78c0]
call fcn.140001a58
lea rdx, [0x14019d340]
lea rcx, [rbp + 0x78e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x78e0]
call fcn.140001a58
lea rdx, [0x14019d3a0]
lea rcx, [rbp + 0x7900]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7900]
call fcn.140001a58
lea rdx, [0x14019d420]
lea rcx, [rbp + 0x7920]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7920]
call fcn.140001a58
lea rdx, [0x14019d480]
lea rcx, [rbp + 0x7940]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7940]
call fcn.140001a58
lea rdx, [0x14019d4e0]
lea rcx, [rbp + 0x7960]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7960]
call fcn.140001a58
lea rdx, [0x14019d560]
lea rcx, [rbp + 0x7980]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7980]
call fcn.140001a58
lea rdx, [0x14019d600]
lea rcx, [rbp + 0x79a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x79a0]
call fcn.140001a58
lea rdx, [0x14019d6a0]
lea rcx, [rbp + 0x79c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x79c0]
call fcn.140001a58
lea rdx, [0x14019d750]
lea rcx, [rbp + 0x79e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x79e0]
call fcn.140001a58
lea rdx, [0x14019d7e0]
lea rcx, [rbp + 0x7a00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7a00]
call fcn.140001a58
lea rdx, [0x14019d870]
lea rcx, [rbp + 0x7a20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7a20]
call fcn.140001a58
lea rdx, [0x14019d900]
lea rcx, [rbp + 0x7a40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7a40]
call fcn.140001a58
lea rdx, [0x14019d9c0]
lea rcx, [rbp + 0x7a60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7a60]
call fcn.140001a58
lea rdx, [0x14019da80]
lea rcx, [rbp + 0x7a80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7a80]
call fcn.140001a58
lea rdx, [0x14019db30]
lea rcx, [rbp + 0x7aa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7aa0]
call fcn.140001a58
lea rdx, [0x14019dbe0]
lea rcx, [rbp + 0x7ac0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7ac0]
call fcn.140001a58
lea rdx, [0x14019dc70]
lea rcx, [rbp + 0x7ae0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7ae0]
call fcn.140001a58
lea rdx, [0x14019dcf0]
lea rcx, [rbp + 0x7b00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7b00]
call fcn.140001a58
lea rdx, [0x14019dd60]
lea rcx, [rbp + 0x7b20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7b20]
call fcn.140001a58
lea rdx, [0x14019ddd0]
lea rcx, [rbp + 0x7b40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7b40]
call fcn.140001a58
lea rdx, [0x14019de30]
lea rcx, [rbp + 0x7b60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7b60]
call fcn.140001a58
lea rdx, [0x14019deb0]
lea rcx, [rbp + 0x7b80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7b80]
call fcn.140001a58
lea rdx, [0x14019df60]
lea rcx, [rbp + 0x7ba0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7ba0]
call fcn.140001a58
lea rdx, [0x14019e000]
lea rcx, [rbp + 0x7bc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7bc0]
call fcn.140001a58
lea rdx, [0x14019e070]
lea rcx, [rbp + 0x7be0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7be0]
call fcn.140001a58
lea rdx, [0x14019e0e0]
lea rcx, [rbp + 0x7c00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7c00]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftCryptography__v_GUID__t_REG_SZ__d__random___random___random___random___f
lea rcx, [rbp + 0x7c20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7c20]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftCryptography__v_MachineGuid__t_REG_SZ__d__random__random___random___random___random___f
lea rcx, [rbp + 0x7c40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7c40]
call fcn.140001a58
lea rdx, [0x14019e240]
lea rcx, [rbp + 0x7c60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7c60]
call fcn.140001a58
lea rdx, [0x14019e2d0]
lea rcx, [rbp + 0x7c80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7c80]
call fcn.140001a58
lea rdx, [0x14019e340]
lea rcx, [rbp + 0x7ca0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7ca0]
call fcn.140001a58
lea rdx, [0x14019e3b0]
lea rcx, [rbp + 0x7cc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7cc0]
call fcn.140001a58
lea rdx, [0x14019e420]
lea rcx, [rbp + 0x7ce0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7ce0]
call fcn.140001a58
lea rdx, [0x14019e4b8]
lea rcx, [rbp + 0x7d00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7d00]
call fcn.140001a58
lea rdx, [0x14019e4f0]
lea rcx, [rbp + 0x7d20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7d20]
call fcn.140001a58
lea rdx, [0x14019e598]
lea rcx, [rbp + 0x7d40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7d40]
call fcn.140001a58
lea rdx, [0x14019e5d8]
lea rcx, [rbp + 0x7d60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7d60]
call fcn.140001a58
lea rdx, [0x14019e610]
lea rcx, [rbp + 0x7d80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7d80]
call fcn.140001a58
lea rdx, [0x14019e648]
lea rcx, [rbp + 0x7da0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7da0]
call fcn.140001a58
lea rdx, [0x14019e678]
lea rcx, [rbp + 0x7dc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7dc0]
call fcn.140001a58
lea rdx, [0x14019e6b0]
lea rcx, [rbp + 0x7de0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7de0]
call fcn.140001a58
lea rdx, [0x14019e710]
lea rcx, [rbp + 0x7e00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7e00]
call fcn.140001a58
lea rdx, [0x14019e770]
lea rcx, [rbp + 0x7e20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7e20]
call fcn.140001a58
lea rdx, [0x14019e7d0]
lea rcx, [rbp + 0x7e40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7e40]
call fcn.140001a58
lea rdx, [0x14019e830]
lea rcx, [rbp + 0x7e60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7e60]
call fcn.140001a58
lea rdx, [0x14019e8d0]
lea rcx, [rbp + 0x7e80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7e80]
call fcn.140001a58
lea rdx, [0x14019e960]
lea rcx, [rbp + 0x7ea0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7ea0]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSYSTEMCurrentControlSetServicesmssmbiosData__v_RegistersData__f
lea rcx, [rbp + 0x7ec0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7ec0]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSYSTEMCurrentControlSetServicesmssmbiosData__v_BiosData__f
lea rcx, [rbp + 0x7ee0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7ee0]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSYSTEMCurrentControlSetServicesmssmbiosData__v_AcpiData__f
lea rcx, [rbp + 0x7f00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7f00]
call fcn.140001a58
lea rdx, [0x14019eaf0]
lea rcx, [rbp + 0x7f20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7f20]
call fcn.140001a58
lea rdx, [0x14019eb50]
lea rcx, [rbp + 0x7f40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7f40]
call fcn.140001a58
lea rdx, [0x14019ebd0]
lea rcx, [rbp + 0x7f60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7f60]
call fcn.140001a58
lea rdx, [0x14019ec60]
lea rcx, [rbp + 0x7f80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7f80]
call fcn.140001a58
lea rdx, [0x14019ecf0]
lea rcx, [rbp + 0x7fa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7fa0]
call fcn.140001a58
lea rdx, [0x14019ed20]
lea rcx, [rbp + 0x7fc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7fc0]
call fcn.140001a58
lea rdx, [0x14019ed90]
lea rcx, [rbp + 0x7fe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x7fe0]
call fcn.140001a58
lea rdx, [0x14019edf0]
lea rcx, [rbp + 0x8000]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8000]
call fcn.140001a58
lea rdx, [0x14019eea0]
lea rcx, [rbp + 0x8020]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8020]
call fcn.140001a58
lea rdx, [0x14019ef40]
lea rcx, [rbp + 0x8040]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8040]
call fcn.140001a58
lea rdx, [0x14019efe0]
lea rcx, [rbp + 0x8060]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8060]
call fcn.140001a58
lea rdx, [0x14019f058]
lea rcx, [rbp + 0x8080]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8080]
call fcn.140001a58
lea rdx, [0x14019f0a0]
lea rcx, [rbp + 0x80a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x80a0]
call fcn.140001a58
lea rdx, [0x14019f160]
lea rcx, [rbp + 0x80c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x80c0]
call fcn.140001a58
lea rdx, [0x14019f220]
lea rcx, [rbp + 0x80e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x80e0]
call fcn.140001a58
lea rdx, [0x14019f290]
lea rcx, [rbp + 0x8100]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8100]
call fcn.140001a58
lea rdx, [0x14019f310]
lea rcx, [rbp + 0x8120]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8120]
call fcn.140001a58
lea rdx, [0x14019f380]
lea rcx, [rbp + 0x8140]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8140]
call fcn.140001a58
lea rdx, [0x14019f400]
lea rcx, [rbp + 0x8160]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8160]
call fcn.140001a58
lea rdx, [0x14019f458]
lea rcx, [rbp + 0x8180]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8180]
call fcn.140001a58
lea rdx, [0x14019f490]
lea rcx, [rbp + 0x81a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x81a0]
call fcn.140001a58
lea rdx, [0x14019f380]
lea rcx, [rbp + 0x81c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x81c0]
call fcn.140001a58
lea rdx, [0x14019d100]
lea rcx, [rbp + 0x81e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x81e0]
call fcn.140001a58
lea rdx, [0x14019f4d0]
lea rcx, [rbp + 0x8200]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8200]
call fcn.140001a58
lea rdx, [0x14019f580]
lea rcx, [rbp + 0x8220]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8220]
call fcn.140001a58
lea rdx, [0x14019f630]
lea rcx, [rbp + 0x8240]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8240]
call fcn.140001a58
lea rdx, [0x14019f710]
lea rcx, [rbp + 0x8260]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8260]
call fcn.140001a58
lea rdx, [0x14019f7d0]
lea rcx, [rbp + 0x8280]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8280]
call fcn.140001a58
lea rdx, [0x14019f890]
lea rcx, [rbp + 0x82a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x82a0]
call fcn.140001a58
lea rdx, [0x14019f940]
lea rcx, [rbp + 0x82c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x82c0]
call fcn.140001a58
lea rdx, [0x14019f9f0]
lea rcx, [rbp + 0x82e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x82e0]
call fcn.140001a58
lea rdx, [0x14019fa70]
lea rcx, [rbp + 0x8300]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8300]
call fcn.140001a58
lea rdx, [0x14019faf0]
lea rcx, [rbp + 0x8320]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8320]
call fcn.140001a58
lea rdx, [0x14019fb70]
lea rcx, [rbp + 0x8340]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8340]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSystemCurrentControlSetControlNotifications__v_418A073AA3BC8075__t_REG_BINARY__d__random__random__random__random__random__random__random__random__random__random__random__random___f
lea rcx, [rbp + 0x8360]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8360]
call fcn.140001a58
lea rdx, [0x14019fcf0]
lea rcx, [rbp + 0x8380]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8380]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersionNotificationsData__v_418A073AA3BC3475__t_REG_BINARY__d__random__random__random__random__random__random__random__random__random__random__random__random___f
lea rcx, [rbp + 0x83a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x83a0]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMHARDWAREDESCRIPTIONSystemCentralProcessor0__f
lea rcx, [rbp + 0x83c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x83c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKCUSoftwareMicrosoftDirect3D__v_WHQLClass__t_REG_BINARY__d__random__random__random__random__random__random__random__random__random__random__random__random___f
lea rcx, [rbp + 0x83e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x83e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetControlComputerNameComputerName__v_ComputerName__t_REG_SZ__d_DESKTOP__random___f
lea rcx, [rbp + 0x8400]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8400]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetControlComputerNameActiveComputerName__v_ComputerName__t_REG_SZ__d_DESKTOP__random___f
lea rcx, [rbp + 0x8420]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8420]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate__v_SusClientId__t_REG_SZ__d__random___random___random___random___random___f
lea rcx, [rbp + 0x8440]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8440]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMHardwareConfig__v_LastConfig__t_REG_SZ__d__random___random___random__f
lea rcx, [rbp + 0x8460]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8460]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMHardwareConfigCurrent__v_BaseBoardProduct__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x8480]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8480]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMSoftwareMicrosoft__v_BuildLab__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0x84a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x84a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMSoftwareMicrosoft__v_BuildLabEx__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0x84c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x84c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDESCRIPTIONSystemBIOS__v_BaseBoardProduct__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x84e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x84e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMControlSet001ServiceskbdclassParameters__v_WppRecorder_TraceGuid__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8500]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8500]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMControlSet001ServicesmouhidParameters__v_WppRecorder_TraceGuid__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8520]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8520]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMControlSet001ControlClass4d36e968_e325_11ce_bfc1_08002be103180000__v_UserModeDriverGUID__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8540]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8540]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersion__v_BuildBranch__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8560]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8560]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersion__v_BuildGUID__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8580]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8580]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersion__v_BuildLab__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x85a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x85a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDEVICEMAPScsiScsi___Port___0Scsi___Bus___0Target___Id___0Logical___Unit___Id___0__v_Identifier__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x85c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x85c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDEVICEMAPScsiScsi___Port___1Scsi___Bus___0Target___Id___0Logical___Unit___Id___0__v_Identifier__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x85e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x85e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDESCRIPTIONSystemMultifunctionAdapter0DiskController0DiskPeripheral0__v_Identifier__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8600]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8600]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDESCRIPTIONSystemMultifunctionAdapter0DiskController0DiskPeripheral1__v_Identifier__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8620]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8620]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMControlSet001ServicesBasicDisplayVideo__v_VideoID__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8640]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8640]
call fcn.140001a58
lea rdx, [0x1401a0a70]
lea rcx, [rbp + 0x8660]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8660]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetServicesTcpipParameters__v_Hostname__t_REG_SZ__d_DESKTOP__random___f
lea rcx, [rbp + 0x8680]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8680]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSystemCurrentControlSetServicesTcpipParameters__v_Domain__t_REG_SZ__d__random___f
lea rcx, [rbp + 0x86a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x86a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSystemCurrentControlSetControlDevQuery6__v_UUID__t_REG_SZ__d__random___f
lea rcx, [rbp + 0x86c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x86c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetServicesTcpipParameters__v_NV___Hostname__t_REG_SZ__d_DESKTOP__random___f
lea rcx, [rbp + 0x86e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x86e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetControlIDConfigDBHardware___Profiles0001__v_HwProfileGuid__t_REG_SZ__d__random__random___random___random___random__random___f
lea rcx, [rbp + 0x8700]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8700]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetControlIDConfigDBHardware___Profiles0001__v_GUID__t_REG_SZ__d__random__random___random___random___random__random___f
lea rcx, [rbp + 0x8720]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8720]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersion__v_BuildGUID__t_REG_SZ__d__random___f
lea rcx, [rbp + 0x8740]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8740]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersion__v_REGisteredOwner__t_REG_SZ__d__random___f
lea rcx, [rbp + 0x8760]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8760]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersion__v_REGisteredOrganization__t_REG_SZ__d__random___f
lea rcx, [rbp + 0x8780]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8780]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersion__v_ProductId__t_REG_SZ__d__random__random___random___random___random___f
lea rcx, [rbp + 0x87a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x87a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersion__v_InstallDate__t_REG_SZ__d__random__random___f
lea rcx, [rbp + 0x87c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x87c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersion__v_InstallTime__t_REG_SZ__d__random___f
lea rcx, [rbp + 0x87e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x87e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersion__v_BuildLabEx__t_REG_SZ__d__random___f
lea rcx, [rbp + 0x8800]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8800]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetControlSystemInformation__v_ComputerHardwareId__t_REG_SZ__d__random__random___random___random___random___f
lea rcx, [rbp + 0x8820]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8820]
call fcn.140001a58
lea rdx, str.REG_delete_HKCUSoftwareEpic___Games__f
lea rcx, [rbp + 0x8840]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8840]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersionTracingMicrosoftProfileProfile__v_Guid__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8860]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8860]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREClassescom.epicgames.launcher__f
lea rcx, [rbp + 0x8880]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8880]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREWOW6432NodeEpicGames__f
lea rcx, [rbp + 0x88a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x88a0]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREWOW6432NodeEpic___Games__f
lea rcx, [rbp + 0x88c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x88c0]
call fcn.140001a58
lea rdx, str.reg_delete_HKCRcom.epicgames.launcher__f
lea rcx, [rbp + 0x88e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x88e0]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSYSTEMMountedDevices__f
lea rcx, [rbp + 0x8900]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8900]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREMicrosoftDfrgStatistics__f
lea rcx, [rbp + 0x8920]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8920]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerBitBucketVolume__f
lea rcx, [rbp + 0x8940]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8940]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerMountPoints2CPCVolume__f
lea rcx, [rbp + 0x8960]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8960]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerMountPoints2__f
lea rcx, [rbp + 0x8980]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8980]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerBitBucketLastEnum__f
lea rcx, [rbp + 0x89a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x89a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate__v_AccountDomainSid__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x89c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x89c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate__v_PingID__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x89e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x89e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate__v_SusClientId__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8a00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8a00]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSYSTEMCurrentControlSetServicesmssmbiosData__v_SMBiosData__f
lea rcx, [rbp + 0x8a20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8a20]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWARENVIDIA___CorporationGlobal__v_ClientUUID__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8a40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8a40]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWARENVIDIA___CorporationGlobal__v_PersistenceIdentifier__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8a60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8a60]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWARENVIDIA___CorporationGlobalCoProcManager__v_ChipsetMatchID__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8a80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8a80]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSYSTEMMountedDevices__f
lea rcx, [rbp + 0x8aa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8aa0]
call fcn.140001a58
lea rdx, str.reg_delete_HKCUSoftwareMicrosoftWindowsShellAssociationsUrlAssociationscom.epicgames.launcher__f
lea rcx, [rbp + 0x8ac0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8ac0]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREMicrosoftDfrgStatistics__f
lea rcx, [rbp + 0x8ae0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8ae0]
call fcn.140001a58
lea rdx, str.reg_delete_HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerBitBucketVolume__f
lea rcx, [rbp + 0x8b00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8b00]
call fcn.140001a58
lea rdx, str.reg_delete_HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerMountPoints2CPCVolume__f
lea rcx, [rbp + 0x8b20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8b20]
call fcn.140001a58
lea rdx, str.reg_delete_HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerMountPoints2__f
lea rcx, [rbp + 0x8b40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8b40]
call fcn.140001a58
lea rdx, str.reg_delete_HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerBitBucket__v_LastEnum__f
lea rcx, [rbp + 0x8b60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8b60]
call fcn.140001a58
lea rdx, str.REG_ADD_HKCUSoftwareClassesInterface__v_ClsidStore__t_REG_BINARY__d__random__random__random__random__random__random__random__random__random__random__random__random___f
lea rcx, [rbp + 0x8b80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8b80]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetControlSystemInformation__v_ComputerHardwareId__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8ba0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8ba0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetControlSystemInformation__v_ComputerHardwareIds__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8bc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8bc0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftSQMClient__v_MachineId__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8be0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8be0]
call fcn.140001a58
lea rdx, str.reg_delete_HKCUSoftwareClassesInterface__v_ClsidStore__f
lea rcx, [rbp + 0x8c00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8c00]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000__v__DriverProviderInfo__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8c20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8c20]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000__v_UserModeDriverGUID__t_REG_SZ__d__random___random___random___random__random___f
lea rcx, [rbp + 0x8c40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8c40]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackSettingsRequests__f
lea rcx, [rbp + 0x8c60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8c60]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersionSoftwareProtectionPlatform__v_BackupProductKeyDefault__f
lea rcx, [rbp + 0x8c80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8c80]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersionSoftwareProtectionPlatform__v_actionlist__f
lea rcx, [rbp + 0x8ca0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8ca0]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersionSoftwareProtectionPlatform__v_ServiceSessionId__f
lea rcx, [rbp + 0x8cc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8cc0]
call fcn.140001a58
lea rdx, str.reg_delete_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerUserAssist__f
lea rcx, [rbp + 0x8ce0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8ce0]
call fcn.140001a58
lea rdx, str.reg_delete_HKCUSoftwareHex_RaysIDAHistory__f
lea rcx, [rbp + 0x8d00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8d00]
call fcn.140001a58
lea rdx, str.reg_delete_HKCUSoftwareHex_RaysIDAHistory64__f
lea rcx, [rbp + 0x8d20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8d20]
call fcn.140001a58
lea rdx, str.reg_delete_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersionSoftwareProtectionPlatform__v_ServiceSessionId__f
lea rcx, [rbp + 0x8d40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8d40]
call fcn.140001a58
lea rdx, str.REG_ADD_HKCUSoftwareMicrosoftDirect3D__v_WHQLClass__t_REG_BINARY__d__random__random__random__random__random__random__random__random__random__random__random__random___f
lea rcx, [rbp + 0x8d60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8d60]
call fcn.140001a58
lea rdx, str.REG_ADD_HKCUSoftwareClassesInstallerDependencies__v_MSICache__t_REG_BINARY__d__random__random__random__random__random__random__random__random__random__random__random___f
lea rcx, [rbp + 0x8d80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8d80]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetServicesTPMWMI__v_WindowsAIKHash__t_REG_BINARY__d__random__random__random__random__random__random__random__random__random__random___f
lea rcx, [rbp + 0x8da0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8da0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate__v_SusClientIdValidation__t_REG_BINARY__d__random__random__random__random__random__random__random__random__random__random__random__random___f
lea rcx, [rbp + 0x8dc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8dc0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKCUSYSTEMCurrentControlSetServicesTPMODUID__v_RandomSeed__t_REG_BINARY__d__random__random__random__random__random__random__random__random__random__random__random__random___f
lea rcx, [rbp + 0x8de0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8de0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftInternet___ExplorerMigration__v_IE___Installed___Date__t_REG_BINARY__d__random__random__random__random__random__random__random__random__random___f
lea rcx, [rbp + 0x8e00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8e00]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersion__v_DigitalProductId__t_REG_BINARY__d__random__random__random__random__random__random__random__random__random___f
lea rcx, [rbp + 0x8e20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8e20]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersion__v_DigitalProductId4__t_REG_BINARY__d__random__random__random__random__random__random__random__random__random___f
lea rcx, [rbp + 0x8e40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8e40]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftSQMClient__v_WinSqmFirstSessionStartTime__t_REG_QWORD__d__random__random__random___f
lea rcx, [rbp + 0x8e60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8e60]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersion__v_InstallTime__t_REG_QWORD__d__random__random__random___f
lea rcx, [rbp + 0x8e80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8e80]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindows___NTCurrentVersion__v_InstallDate__t_REG_QWORD__d__random__random__random___f
lea rcx, [rbp + 0x8ea0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8ea0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindowsCurrentVersionDiagnosticsDiagTrackSevilleEventlogManager__v_LastEventlogWrittenTime__t_REG_QWORD__d__random__random__random___f
lea rcx, [rbp + 0x8ec0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8ec0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSystemCurrentControlSetControlNotifi_random_ions__v_418A073AA3BC8075__t_REG_BINARY__d__random__random__random__random__random__random__random__random__random__random__random__random___f
lea rcx, [rbp + 0x8ee0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8ee0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREMicrosoftWindowsCurrentVersionWINEVTChannelsMicrosoft_Windows_Kernel_EventTracing_Admin__v_OwningPublisher__t_REG_SZ__d__random___random___random__random___f
lea rcx, [rbp + 0x8f00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8f00]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_037bf8fa_5b18_50b2_ba13_2580426ff357__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x8f20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8f20]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_5c8c5d29_b5ed_5229_a26c_e661b1e1129b__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x8f40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8f40]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_f2461683_1fa0_5629_b022_d0ffaee63ed0__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x8f60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8f60]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_41417485_85de_59b6_a9fa_e7f706b1d992__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x8f80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8f80]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_ca09ac19_a9a0_5236_a0f6_ce81dcc46d9a__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x8fa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8fa0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_81287c07_f962_5bac_a75b_e98c2c8f5f93__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x8fc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8fc0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a0a97217_b3b7_58c7_a1fd_1a9295288031__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x8fe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x8fe0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_28c62655_d5a5_58ee_9dae_4c1d2c09f9ef__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9000]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9000]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_67b72407_d583_525b_9f54_cc0f8ee0552e__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9020]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9020]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a4d0f078_0772_5228_a37a_db55fdb8ee04__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9040]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9040]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_21a4c841_f6fc_5651_8cde_435c9effc378__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9060]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9060]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_cd0c55c7_a3ae_55b4_add7_578cdc06511f__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9080]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9080]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_feb9c5fe_1cdf_59a8_8008_550892c61c37__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x90a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x90a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_6ef3fe51_9106_55cf_a553_f5d21bb78cc3__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x90c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x90c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_7b3e1573_c771_5dbd_b795_f8344771349d__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x90e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x90e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_41417485_85de_59b6_a9fa_e7f706b1d992__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9100]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9100]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_ca09ac19_a9a0_5236_a0f6_ce81dcc46d9a__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9120]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9120]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_81287c07_f962_5bac_a75b_e98c2c8f5f93__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9140]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9140]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a0a97217_b3b7_58c7_a1fd_1a9295288031__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9160]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9160]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_28c62655_d5a5_58ee_9dae_4c1d2c09f9ef__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9180]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9180]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_67b72407_d583_525b_9f54_cc0f8ee0552e__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x91a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x91a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a4d0f078_0772_5228_a37a_db55fdb8ee04__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x91c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x91c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_21a4c841_f6fc_5651_8cde_435c9effc378__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x91e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x91e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_cd0c55c7_a3ae_55b4_add7_578cdc06511f__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9200]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9200]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_feb9c5fe_1cdf_59a8_8008_550892c61c37__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9220]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9220]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_6ef3fe51_9106_55cf_a553_f5d21bb78cc3__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9240]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9240]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_7b3e1573_c771_5dbd_b795_f8344771349d__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9260]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9260]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_037bf8fa_5b18_50b2_ba13_2580426ff357__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9280]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9280]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_5c8c5d29_b5ed_5229_a26c_e661b1e1129b__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x92a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x92a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_f2461683_1fa0_5629_b022_d0ffaee63ed0__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x92c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x92c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_41417485_85de_59b6_a9fa_e7f706b1d992__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x92e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x92e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_ca09ac19_a9a0_5236_a0f6_ce81dcc46d9a__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9300]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9300]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_81287c07_f962_5bac_a75b_e98c2c8f5f93__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9320]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9320]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a0a97217_b3b7_58c7_a1fd_1a9295288031__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9340]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9340]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_28c62655_d5a5_58ee_9dae_4c1d2c09f9ef__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9360]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9360]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_67b72407_d583_525b_9f54_cc0f8ee0552e__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9380]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9380]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a4d0f078_0772_5228_a37a_db55fdb8ee04__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x93a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x93a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_21a4c841_f6fc_5651_8cde_435c9effc378__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x93c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x93c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_cd0c55c7_a3ae_55b4_add7_578cdc06511f__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x93e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x93e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_feb9c5fe_1cdf_59a8_8008_550892c61c37__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9400]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9400]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_6ef3fe51_9106_55cf_a553_f5d21bb78cc3__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9420]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9420]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_7b3e1573_c771_5dbd_b795_f8344771349d__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9440]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9440]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_41417485_85de_59b6_a9fa_e7f706b1d992__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9460]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9460]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_ca09ac19_a9a0_5236_a0f6_ce81dcc46d9a__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9480]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9480]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_81287c07_f962_5bac_a75b_e98c2c8f5f93__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x94a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x94a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a0a97217_b3b7_58c7_a1fd_1a9295288031__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x94c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x94c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_28c62655_d5a5_58ee_9dae_4c1d2c09f9ef__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x94e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x94e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_67b72407_d583_525b_9f54_cc0f8ee0552e__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9500]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9500]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a4d0f078_0772_5228_a37a_db55fdb8ee04__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9520]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9520]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_21a4c841_f6fc_5651_8cde_435c9effc378__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9540]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9540]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_cd0c55c7_a3ae_55b4_add7_578cdc06511f__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9560]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9560]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_feb9c5fe_1cdf_59a8_8008_550892c61c37__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9580]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9580]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_6ef3fe51_9106_55cf_a553_f5d21bb78cc3__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x95a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x95a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_7b3e1573_c771_5dbd_b795_f8344771349d__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x95c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x95c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_037bf8fa_5b18_50b2_ba13_2580426ff357__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x95e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x95e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_5c8c5d29_b5ed_5229_a26c_e661b1e1129b__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9600]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9600]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_f2461683_1fa0_5629_b022_d0ffaee63ed0__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9620]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9620]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_41417485_85de_59b6_a9fa_e7f706b1d992__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9640]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9640]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_ca09ac19_a9a0_5236_a0f6_ce81dcc46d9a__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9660]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9660]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_81287c07_f962_5bac_a75b_e98c2c8f5f93__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9680]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9680]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a0a97217_b3b7_58c7_a1fd_1a9295288031__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x96a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x96a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_28c62655_d5a5_58ee_9dae_4c1d2c09f9ef__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x96c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x96c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_67b72407_d583_525b_9f54_cc0f8ee0552e__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x96e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x96e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a4d0f078_0772_5228_a37a_db55fdb8ee04__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9700]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9700]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_21a4c841_f6fc_5651_8cde_435c9effc378__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9720]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9720]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_cd0c55c7_a3ae_55b4_add7_578cdc06511f__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9740]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9740]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_feb9c5fe_1cdf_59a8_8008_550892c61c37__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9760]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9760]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_6ef3fe51_9106_55cf_a553_f5d21bb78cc3__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9780]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9780]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_7b3e1573_c771_5dbd_b795_f8344771349d__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x97a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x97a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_41417485_85de_59b6_a9fa_e7f706b1d992__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x97c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x97c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_ca09ac19_a9a0_5236_a0f6_ce81dcc46d9a__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x97e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x97e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_81287c07_f962_5bac_a75b_e98c2c8f5f93__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9800]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9800]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a0a97217_b3b7_58c7_a1fd_1a9295288031__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9820]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9820]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_28c62655_d5a5_58ee_9dae_4c1d2c09f9ef__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9840]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9840]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_67b72407_d583_525b_9f54_cc0f8ee0552e__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9860]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9860]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a4d0f078_0772_5228_a37a_db55fdb8ee04__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9880]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9880]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_21a4c841_f6fc_5651_8cde_435c9effc378__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x98a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x98a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_cd0c55c7_a3ae_55b4_add7_578cdc06511f__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x98c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x98c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_feb9c5fe_1cdf_59a8_8008_550892c61c37__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x98e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x98e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_6ef3fe51_9106_55cf_a553_f5d21bb78cc3__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9900]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9900]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_7b3e1573_c771_5dbd_b795_f8344771349d__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0x9920]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9920]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_037bf8fa_5b18_50b2_ba13_2580426ff357__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9940]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9940]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_5c8c5d29_b5ed_5229_a26c_e661b1e1129b__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9960]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9960]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_f2461683_1fa0_5629_b022_d0ffaee63ed0__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9980]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9980]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_41417485_85de_59b6_a9fa_e7f706b1d992__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x99a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x99a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_ca09ac19_a9a0_5236_a0f6_ce81dcc46d9a__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x99c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x99c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_81287c07_f962_5bac_a75b_e98c2c8f5f93__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x99e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x99e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a0a97217_b3b7_58c7_a1fd_1a9295288031__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9a00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9a00]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_28c62655_d5a5_58ee_9dae_4c1d2c09f9ef__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9a20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9a20]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_67b72407_d583_525b_9f54_cc0f8ee0552e__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9a40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9a40]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a4d0f078_0772_5228_a37a_db55fdb8ee04__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9a60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9a60]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_21a4c841_f6fc_5651_8cde_435c9effc378__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9a80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9a80]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_cd0c55c7_a3ae_55b4_add7_578cdc06511f__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9aa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9aa0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_feb9c5fe_1cdf_59a8_8008_550892c61c37__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9ac0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9ac0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_6ef3fe51_9106_55cf_a553_f5d21bb78cc3__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9ae0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9ae0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_7b3e1573_c771_5dbd_b795_f8344771349d__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9b00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9b00]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_41417485_85de_59b6_a9fa_e7f706b1d992__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9b20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9b20]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_ca09ac19_a9a0_5236_a0f6_ce81dcc46d9a__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9b40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9b40]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_81287c07_f962_5bac_a75b_e98c2c8f5f93__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9b60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9b60]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a0a97217_b3b7_58c7_a1fd_1a9295288031__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9b80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9b80]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_28c62655_d5a5_58ee_9dae_4c1d2c09f9ef__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9ba0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9ba0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_67b72407_d583_525b_9f54_cc0f8ee0552e__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9bc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9bc0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a4d0f078_0772_5228_a37a_db55fdb8ee04__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9be0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9be0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_21a4c841_f6fc_5651_8cde_435c9effc378__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9c00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9c00]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_cd0c55c7_a3ae_55b4_add7_578cdc06511f__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9c20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9c20]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_feb9c5fe_1cdf_59a8_8008_550892c61c37__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9c40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9c40]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_6ef3fe51_9106_55cf_a553_f5d21bb78cc3__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9c60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9c60]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_7b3e1573_c771_5dbd_b795_f8344771349d__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9c80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9c80]
call fcn.140001a58
lea rdx, str.REG_ADD_HKUS_1_5_21_1890030585_3173979648_977140667_1001_ClassesLocal_SettingsSoftwareMicrosoftWindowsShellBagMRU6000__f
lea rcx, [rbp + 0x9ca0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9ca0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMControlSet001ControlClass4d36e967_e325_11ce_bfc1_08002be10318ConfigurationVariablesBusDeviceDesc__v_PropertyGuid__t_REG_SZ__d__Hex8___Hex1___Hex0___Hex1___Hex10___f
lea rcx, [rbp + 0x9cc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9cc0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMControlSet001ControlClass4d36e968_e325_11ce_bfc1_08002be10318ConfigurationVariablesDeviceDesc__v_PropertyGuid__t_REG_SZ__d__Hex8___Hex1___Hex0___Hex1___Hex10___f
lea rcx, [rbp + 0x9ce0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9ce0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMControlSet001ControlClass4d36e968_e325_11ce_bfc1_08002be10318ConfigurationVariablesDriver__v_PropertyGuid__t_REG_SZ__d__Hex8___Hex1___Hex0___Hex1___Hex10___f
lea rcx, [rbp + 0x9d00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9d00]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSystemInformation__v_ComputerHardwareId__t_REG_SZ__d__Hex8___Hex1___Hex0___Hex1___Hex10___f
lea rcx, [rbp + 0x9d20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9d20]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINEHARDWAREDESCRIPTIONSystemBIOS__v_BaseBoardManufacturer__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9d40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9d40]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINEHARDWAREDESCRIPTIONSystemBIOS__v_SystemManufacturer__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9d60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9d60]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINEHARDWAREDESCRIPTIONSystemBIOS__v_SystemProductName__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9d80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9d80]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSystemInformation__v_SystemManufacturer__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9da0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9da0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSystemInformation__v_SystemProductName__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9dc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9dc0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSystemInformation__v_SystemManufacturer__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9de0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9de0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSystemInformation__v_SystemProductName__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9e00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9e00]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfigCurrent__v_SystemManufacturer__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9e20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9e20]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfigCurrent__v_SystemProductName__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9e40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9e40]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfigCurrent__v_BaseBoardManufacturer__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9e60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9e60]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0f__v_SystemManufacturer__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9e80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9e80]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0f__v_SystemProductName__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9ea0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9ea0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0f__v_BaseBoardManufacturer__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9ec0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9ec0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfigCurrentComputerIds__v_037bf8fa_5b18_50b2_ba13_2580426ff357__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9ee0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9ee0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfigCurrentComputerIds__v_5c8c5d29_b5ed_5229_a26c_e661b1e1129b__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9f00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9f00]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfigCurrentComputerIds__v_f2461683_1fa0_5629_b022_d0ffaee63ed0__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9f20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9f20]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_037bf8fa_5b18_50b2_ba13_2580426ff357__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9f40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9f40]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_5c8c5d29_b5ed_5229_a26c_e661b1e1129b__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9f60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9f60]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_f2461683_1fa0_5629_b022_d0ffaee63ed0__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9f80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9f80]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_41417485_85de_59b6_a9fa_e7f706b1d992__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9fa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9fa0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_ca09ac19_a9a0_5236_a0f6_ce81dcc46d9a__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9fc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9fc0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_81287c07_f962_5bac_a75b_e98c2c8f5f93__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0x9fe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x9fe0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a0a97217_b3b7_58c7_a1fd_1a9295288031__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa000]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa000]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_28c62655_d5a5_58ee_9dae_4c1d2c09f9ef__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa020]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa020]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_67b72407_d583_525b_9f54_cc0f8ee0552e__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa040]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa040]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a4d0f078_0772_5228_a37a_db55fdb8ee04__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa060]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa060]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_21a4c841_f6fc_5651_8cde_435c9effc378__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa080]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa080]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_cd0c55c7_a3ae_55b4_add7_578cdc06511f__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa0a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa0a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_feb9c5fe_1cdf_59a8_8008_550892c61c37__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa0c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa0c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_6ef3fe51_9106_55cf_a553_f5d21bb78cc3__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa0e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa0e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_7b3e1573_c771_5dbd_b795_f8344771349d__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa100]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa100]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_41417485_85de_59b6_a9fa_e7f706b1d992__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa120]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa120]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_ca09ac19_a9a0_5236_a0f6_ce81dcc46d9a__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa140]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa140]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_81287c07_f962_5bac_a75b_e98c2c8f5f93__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa160]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa160]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a0a97217_b3b7_58c7_a1fd_1a9295288031__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa180]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa180]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_28c62655_d5a5_58ee_9dae_4c1d2c09f9ef__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa1a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa1a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_67b72407_d583_525b_9f54_cc0f8ee0552e__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa1c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa1c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a4d0f078_0772_5228_a37a_db55fdb8ee04__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa1e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa1e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_21a4c841_f6fc_5651_8cde_435c9effc378__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa200]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa200]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_cd0c55c7_a3ae_55b4_add7_578cdc06511f__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa220]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa220]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_feb9c5fe_1cdf_59a8_8008_550892c61c37__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa240]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa240]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_6ef3fe51_9106_55cf_a553_f5d21bb78cc3__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa260]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa260]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_7b3e1573_c771_5dbd_b795_f8344771349d__t_REG_SZ__d__ve__f
lea rcx, [rbp + 0xa280]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa280]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINEHARDWAREDESCRIPTIONSystemBIOS__v_BaseBoardManufacturer__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa2a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa2a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINEHARDWAREDESCRIPTIONSystemBIOS__v_SystemManufacturer__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa2c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa2c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINEHARDWAREDESCRIPTIONSystemBIOS__v_SystemProductName__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa2e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa2e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSystemInformation__v_SystemManufacturer__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa300]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa300]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSystemInformation__v_SystemProductName__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa320]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa320]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSystemInformation__v_SystemManufacturer__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa340]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa340]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSystemInformation__v_SystemProductName__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa360]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa360]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfigCurrent__v_SystemManufacturer__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa380]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa380]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfigCurrent__v_SystemProductName__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa3a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa3a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfigCurrent__v_BaseBoardManufacturer__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa3c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa3c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0f__v_SystemManufacturer__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa3e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa3e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0f__v_SystemProductName__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa400]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa400]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0f__v_BaseBoardManufacturer__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa420]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa420]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfigCurrentComputerIds__v_037bf8fa_5b18_50b2_ba13_2580426ff357__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa440]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa440]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfigCurrentComputerIds__v_5c8c5d29_b5ed_5229_a26c_e661b1e1129b__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa460]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa460]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfigCurrentComputerIds__v_f2461683_1fa0_5629_b022_d0ffaee63ed0__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa480]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa480]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_037bf8fa_5b18_50b2_ba13_2580426ff357__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa4a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa4a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_5c8c5d29_b5ed_5229_a26c_e661b1e1129b__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa4c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa4c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_f2461683_1fa0_5629_b022_d0ffaee63ed0__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa4e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa4e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_41417485_85de_59b6_a9fa_e7f706b1d992__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa500]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa500]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_ca09ac19_a9a0_5236_a0f6_ce81dcc46d9a__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa520]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa520]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_81287c07_f962_5bac_a75b_e98c2c8f5f93__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa540]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa540]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a0a97217_b3b7_58c7_a1fd_1a9295288031__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa560]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa560]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_28c62655_d5a5_58ee_9dae_4c1d2c09f9ef__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa580]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa580]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_67b72407_d583_525b_9f54_cc0f8ee0552e__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa5a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa5a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a4d0f078_0772_5228_a37a_db55fdb8ee04__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa5c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa5c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_21a4c841_f6fc_5651_8cde_435c9effc378__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa5e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa5e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_cd0c55c7_a3ae_55b4_add7_578cdc06511f__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa600]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa600]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_feb9c5fe_1cdf_59a8_8008_550892c61c37__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa620]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa620]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_6ef3fe51_9106_55cf_a553_f5d21bb78cc3__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa640]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa640]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_7b3e1573_c771_5dbd_b795_f8344771349d__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa660]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa660]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_41417485_85de_59b6_a9fa_e7f706b1d992__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa680]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa680]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_ca09ac19_a9a0_5236_a0f6_ce81dcc46d9a__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa6a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa6a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_81287c07_f962_5bac_a75b_e98c2c8f5f93__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa6c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa6c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a0a97217_b3b7_58c7_a1fd_1a9295288031__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa6e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa6e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_28c62655_d5a5_58ee_9dae_4c1d2c09f9ef__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa700]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa700]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_67b72407_d583_525b_9f54_cc0f8ee0552e__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa720]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa720]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_a4d0f078_0772_5228_a37a_db55fdb8ee04__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa740]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa740]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_21a4c841_f6fc_5651_8cde_435c9effc378__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa760]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa760]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_cd0c55c7_a3ae_55b4_add7_578cdc06511f__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa780]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa780]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_feb9c5fe_1cdf_59a8_8008_550892c61c37__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa7a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa7a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_6ef3fe51_9106_55cf_a553_f5d21bb78cc3__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa7c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa7c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKEY_LOCAL_MACHINESYSTEMHardwareConfiga0408a6a_546c_11ea_af4e_4df901723b0fComputerIds__v_7b3e1573_c771_5dbd_b795_f8344771349d__t_REG_SZ__d__random___random__random__random___f
lea rcx, [rbp + 0xa7e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa7e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDESCRIPTIONSystemBIOS__v_BaseBoardManufacturer__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa800]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa800]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDESCRIPTIONSystemBIOS__v_BaseBoardProduct__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa820]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa820]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDESCRIPTIONSystemBIOS__v_BaseBoardVersion__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa840]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa840]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDESCRIPTIONSystemBIOS__v_BIOSVersion__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa860]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa860]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDESCRIPTIONSystemBIOS__v_SystemFamily__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa880]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa880]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDESCRIPTIONSystemBIOS__v_SystemManufacturer__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa8a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa8a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDESCRIPTIONSystemBIOS__v_SystemProductName__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa8c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa8c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDESCRIPTIONSystemBIOS__v_SystemSKU__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa8e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa8e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDESCRIPTIONSystemBIOS__v_SystemVersion__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa900]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa900]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMHARDWAREDESCRIPTIONSystemBIOS__v_SystemProductName__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa920]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa920]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSOFTWAREWOW6432NodeMicrosoftWindows_NTCurrentVersion__v_RegisteredOrganization__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa940]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa940]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMControlSet001ServicesTcpipParameters__v_HostName__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa960]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa960]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMControlSet001ServicesTcpipParameters__v_NV_HostName__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa980]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa980]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMControlSet001ServicesTcpipParametersDNSRegisteredAdapters146337E2_B748_4468_AC39_FCBBA2D507EC__v_Hostname__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa9a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa9a0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMControlSet001ServicesTcpipParametersDNSRegisteredAdapters34E2F73D_D367_4931_8A5F_FB72BBE02BCB__v_Hostname__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa9c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa9c0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMControlSet001ServicesTcpipParametersDNSRegisteredAdapters8B66020F_34DF_4179_BC45_E6419E7905AD__v_Hostname__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xa9e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa9e0]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetServicesTcpipParameters__v_HostName__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xaa00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaa00]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetServicesTcpipParameters__v_NV_HostName__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xaa20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaa20]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetServicesTcpipParametersDNSRegisteredAdapters146337E2_B748_4468_AC39_FCBBA2D507EC__v_Hostname__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xaa40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaa40]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetServicesTcpipParametersDNSRegisteredAdapters34E2F73D_D367_4931_8A5F_FB72BBE02BCB__v_Hostname__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xaa60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaa60]
call fcn.140001a58
lea rdx, str.REG_ADD_HKLMSYSTEMCurrentControlSetServicesTcpipParametersDNSRegisteredAdapters8B66020F_34DF_4179_BC45_E6419E7905AD__v_Hostname__t_REG_SZ__d__random___random___f
lea rcx, [rbp + 0xaa80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaa80]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_AppDataRoamingMicrosoftWindowsCloudStore
lea rcx, [rbp + 0xaaa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaaa0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_AppDataLocalFortniteGameSaved
lea rcx, [rbp + 0xaac0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaac0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:WindowsINF
lea rcx, [rbp + 0xaae0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaae0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:ProgramData_username_MicrosoftXboxLiveNSALCache
lea rcx, [rbp + 0xab00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xab00]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:UsersPublicDocuments
lea rcx, [rbp + 0xab20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xab20]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:WindowsPrefetch
lea rcx, [rbp + 0xab40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xab40]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_AppDataLocalD3DSCache
lea rcx, [rbp + 0xab60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xab60]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_AppDataLocalCrashReportClient
lea rcx, [rbp + 0xab80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xab80]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Windows_temp
lea rcx, [rbp + 0xaba0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaba0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastore
lea rcx, [rbp + 0xabc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xabc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:WindowsSoftwareDistributionDataStoreLogs
lea rcx, [rbp + 0xabe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xabe0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:ProgramDataMicrosoftWindowsWERTemp
lea rcx, [rbp + 0xac00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xac00]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_AppDataLocalAMDDxCache
lea rcx, [rbp + 0xac20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xac20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__C:Users_username_AppDataLocalNVIDIA_Corporation
lea rcx, [rbp + 0xac40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xac40]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:WindowsPrefetch
lea rcx, [rbp + 0xac60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xac60]
call fcn.140001a58
lea rdx, str._del__s__f__a:h___a_:_a___q_C:Usersusername_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewy.
lea rcx, [rbp + 0xac80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xac80]
call fcn.140001a58
lea rdx, str._del__s__f__a:h___a_:_a___q_C:Users_username_AppDataLocalMicrosoftWindowsWebCache.
lea rcx, [rbp + 0xaca0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaca0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweAC
lea rcx, [rbp + 0xacc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xacc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweLocalCache
lea rcx, [rbp + 0xace0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xace0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings
lea rcx, [rbp + 0xad00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xad00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__C:Program_FilesEpic_GamesFortniteEnginePlugins
lea rcx, [rbp + 0xad20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xad20]
call fcn.140001a58
lea rdx, str.rmdir__s__q__C:Program_FilesEpic_GamesFortniteFortniteGamePlugins
lea rcx, [rbp + 0xad40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xad40]
call fcn.140001a58
lea rdx, str.rmdir__s__q__C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDir
lea rcx, [rbp + 0xad60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xad60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__C:Program_FilesEpic_GamesFortniteFortniteGameConfig
lea rcx, [rbp + 0xad80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xad80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__C:Users_username_AppDataLocalNVIDIA_Corporation
lea rcx, [rbp + 0xada0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xada0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_AppDataRoamingEasyAntiCheat
lea rcx, [rbp + 0xadc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xadc0]
call fcn.140001a58
lea rdx, str.del__f__s__q_C:ProgramDataMicrosoftDataMartPaidWiFiNetworksCache
lea rcx, [rbp + 0xade0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xade0]
call fcn.140001a58
lea rdx, str.del__f__s__q_C:ProgramDataMicrosoftDataMartPaidWiFiRules
lea rcx, [rbp + 0xae00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xae00]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:WindowsServiceProfilesNetworkServiceAppDataLocalMicrosoftWindowsDeliveryOptimizationCache
lea rcx, [rbp + 0xae20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xae20]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_AppDataLocalTemp
lea rcx, [rbp + 0xae40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xae40]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_AppDataLocalMicrosoftWindowsINetCache
lea rcx, [rbp + 0xae60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xae60]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_AppDataLocalMicrosoftWindowsINetCookies
lea rcx, [rbp + 0xae80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xae80]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_AppDataLocalMicrosoftWindowsHistory
lea rcx, [rbp + 0xaea0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaea0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:Users_username_Intel
lea rcx, [rbp + 0xaec0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaec0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_C:WindowsSystem32config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheMetaData
lea rcx, [rbp + 0xaee0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaee0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__C:Users_username_AppDataLocalMicrosoftFeeds_Cache
lea rcx, [rbp + 0xaf00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaf00]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_AppDataRoamingMicrosoftWindowsCloudStore
lea rcx, [rbp + 0xaf20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaf20]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_AppDataLocalFortniteGameSaved
lea rcx, [rbp + 0xaf40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaf40]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:WindowsINF
lea rcx, [rbp + 0xaf60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaf60]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:ProgramData_username_MicrosoftXboxLiveNSALCache
lea rcx, [rbp + 0xaf80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xaf80]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:UsersPublicDocuments
lea rcx, [rbp + 0xafa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xafa0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:WindowsPrefetch
lea rcx, [rbp + 0xafc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xafc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_AppDataLocalD3DSCache
lea rcx, [rbp + 0xafe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xafe0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_AppDataLocalCrashReportClient
lea rcx, [rbp + 0xb000]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb000]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Windows_temp
lea rcx, [rbp + 0xb020]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb020]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastore
lea rcx, [rbp + 0xb040]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb040]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:WindowsSoftwareDistributionDataStoreLogs
lea rcx, [rbp + 0xb060]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb060]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:ProgramDataMicrosoftWindowsWERTemp
lea rcx, [rbp + 0xb080]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb080]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_AppDataLocalAMDDxCache
lea rcx, [rbp + 0xb0a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb0a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__D:Users_username_AppDataLocalNVIDIA_Corporation
lea rcx, [rbp + 0xb0c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb0c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:WindowsPrefetch
lea rcx, [rbp + 0xb0e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb0e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h___a_:_a___q_D:Usersusername_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewy.
lea rcx, [rbp + 0xb100]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb100]
call fcn.140001a58
lea rdx, str._del__s__f__a:h___a_:_a___q_D:Users_username_AppDataLocalMicrosoftWindowsWebCache.
lea rcx, [rbp + 0xb120]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb120]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweAC
lea rcx, [rbp + 0xb140]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb140]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweLocalCache
lea rcx, [rbp + 0xb160]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb160]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings
lea rcx, [rbp + 0xb180]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb180]
call fcn.140001a58
lea rdx, str.rmdir__s__q__D:Program_FilesEpic_GamesFortniteEnginePlugins
lea rcx, [rbp + 0xb1a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb1a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__D:Program_FilesEpic_GamesFortniteFortniteGamePlugins
lea rcx, [rbp + 0xb1c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb1c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__D:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDir
lea rcx, [rbp + 0xb1e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb1e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__D:Program_FilesEpic_GamesFortniteFortniteGameConfig
lea rcx, [rbp + 0xb200]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb200]
call fcn.140001a58
lea rdx, str.rmdir__s__q__D:Users_username_AppDataLocalNVIDIA_Corporation
lea rcx, [rbp + 0xb220]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb220]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_AppDataRoamingEasyAntiCheat
lea rcx, [rbp + 0xb240]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb240]
call fcn.140001a58
lea rdx, str.del__f__s__q_D:ProgramDataMicrosoftDataMartPaidWiFiNetworksCache
lea rcx, [rbp + 0xb260]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb260]
call fcn.140001a58
lea rdx, str.del__f__s__q_D:ProgramDataMicrosoftDataMartPaidWiFiRules
lea rcx, [rbp + 0xb280]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb280]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:WindowsServiceProfilesNetworkServiceAppDataLocalMicrosoftWindowsDeliveryOptimizationCache
lea rcx, [rbp + 0xb2a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb2a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_AppDataLocalTemp
lea rcx, [rbp + 0xb2c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb2c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_AppDataLocalMicrosoftWindowsINetCache
lea rcx, [rbp + 0xb2e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb2e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_AppDataLocalMicrosoftWindowsINetCookies
lea rcx, [rbp + 0xb300]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb300]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_AppDataLocalMicrosoftWindowsHistory
lea rcx, [rbp + 0xb320]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb320]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:Users_username_Intel
lea rcx, [rbp + 0xb340]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb340]
call fcn.140001a58
lea rdx, str.rmdir__s__q_D:WindowsSystem32config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheMetaData
lea rcx, [rbp + 0xb360]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb360]
call fcn.140001a58
lea rdx, str.rmdir__s__q__D:Users_username_AppDataLocalMicrosoftFeeds_Cache
lea rcx, [rbp + 0xb380]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb380]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_AppDataRoamingMicrosoftWindowsCloudStore
lea rcx, [rbp + 0xb3a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb3a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_AppDataLocalFortniteGameSaved
lea rcx, [rbp + 0xb3c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb3c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:WindowsINF
lea rcx, [rbp + 0xb3e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb3e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:ProgramData_username_MicrosoftXboxLiveNSALCache
lea rcx, [rbp + 0xb400]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb400]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:UsersPublicDocuments
lea rcx, [rbp + 0xb420]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb420]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:WindowsPrefetch
lea rcx, [rbp + 0xb440]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb440]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_AppDataLocalD3DSCache
lea rcx, [rbp + 0xb460]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb460]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_AppDataLocalCrashReportClient
lea rcx, [rbp + 0xb480]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb480]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Windows_temp
lea rcx, [rbp + 0xb4a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb4a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastore
lea rcx, [rbp + 0xb4c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb4c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:WindowsSoftwareDistributionDataStoreLogs
lea rcx, [rbp + 0xb4e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb4e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:ProgramDataMicrosoftWindowsWERTemp
lea rcx, [rbp + 0xb500]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb500]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_AppDataLocalAMDDxCache
lea rcx, [rbp + 0xb520]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb520]
call fcn.140001a58
lea rdx, str.rmdir__s__q__E:Users_username_AppDataLocalNVIDIA_Corporation
lea rcx, [rbp + 0xb540]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb540]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:WindowsPrefetch
lea rcx, [rbp + 0xb560]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb560]
call fcn.140001a58
lea rdx, str._del__s__f__a:h___a_:_a___q_E:Usersusername_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewy.
lea rcx, [rbp + 0xb580]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb580]
call fcn.140001a58
lea rdx, str._del__s__f__a:h___a_:_a___q_E:Users_username_AppDataLocalMicrosoftWindowsWebCache.
lea rcx, [rbp + 0xb5a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb5a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweAC
lea rcx, [rbp + 0xb5c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb5c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweLocalCache
lea rcx, [rbp + 0xb5e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb5e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings
lea rcx, [rbp + 0xb600]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb600]
call fcn.140001a58
lea rdx, str.rmdir__s__q__E:Program_FilesEpic_GamesFortniteEnginePlugins
lea rcx, [rbp + 0xb620]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb620]
call fcn.140001a58
lea rdx, str.rmdir__s__q__E:Program_FilesEpic_GamesFortniteFortniteGamePlugins
lea rcx, [rbp + 0xb640]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb640]
call fcn.140001a58
lea rdx, str.rmdir__s__q__E:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDir
lea rcx, [rbp + 0xb660]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb660]
call fcn.140001a58
lea rdx, str.rmdir__s__q__E:Program_FilesEpic_GamesFortniteFortniteGameConfig
lea rcx, [rbp + 0xb680]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb680]
call fcn.140001a58
lea rdx, str.rmdir__s__q__E:Users_username_AppDataLocalNVIDIA_Corporation
lea rcx, [rbp + 0xb6a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb6a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_AppDataRoamingEasyAntiCheat
lea rcx, [rbp + 0xb6c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb6c0]
call fcn.140001a58
lea rdx, str.del__f__s__q_E:ProgramDataMicrosoftDataMartPaidWiFiNetworksCache
lea rcx, [rbp + 0xb6e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb6e0]
call fcn.140001a58
lea rdx, str.del__f__s__q_E:ProgramDataMicrosoftDataMartPaidWiFiRules
lea rcx, [rbp + 0xb700]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb700]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:WindowsServiceProfilesNetworkServiceAppDataLocalMicrosoftWindowsDeliveryOptimizationCache
lea rcx, [rbp + 0xb720]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb720]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_AppDataLocalTemp
lea rcx, [rbp + 0xb740]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb740]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_AppDataLocalMicrosoftWindowsINetCache
lea rcx, [rbp + 0xb760]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb760]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_AppDataLocalMicrosoftWindowsINetCookies
lea rcx, [rbp + 0xb780]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb780]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_AppDataLocalMicrosoftWindowsHistory
lea rcx, [rbp + 0xb7a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb7a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:Users_username_Intel
lea rcx, [rbp + 0xb7c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb7c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_E:WindowsSystem32config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheMetaData
lea rcx, [rbp + 0xb7e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb7e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__E:Users_username_AppDataLocalMicrosoftFeeds_Cache
lea rcx, [rbp + 0xb800]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb800]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataRoamingMicrosoftWindowsCloudStore
lea rcx, [rbp + 0xb820]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb820]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalFortniteGameSaved
lea rcx, [rbp + 0xb840]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb840]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:WindowsINF
lea rcx, [rbp + 0xb860]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb860]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:ProgramData_username_MicrosoftXboxLiveNSALCache
lea rcx, [rbp + 0xb880]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb880]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:UsersPublicDocuments
lea rcx, [rbp + 0xb8a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb8a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:WindowsPrefetch
lea rcx, [rbp + 0xb8c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb8c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalD3DSCache
lea rcx, [rbp + 0xb8e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb8e0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalCrashReportClient
lea rcx, [rbp + 0xb900]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb900]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Windows_temp
lea rcx, [rbp + 0xb920]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb920]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalMicrosoftWindowsSettingSyncmetastore
lea rcx, [rbp + 0xb940]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb940]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:WindowsSoftwareDistributionDataStoreLogs
lea rcx, [rbp + 0xb960]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb960]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:ProgramDataMicrosoftWindowsWERTemp
lea rcx, [rbp + 0xb980]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb980]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalAMDDxCache
lea rcx, [rbp + 0xb9a0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb9a0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__F:Users_username_AppDataLocalNVIDIA_Corporation
lea rcx, [rbp + 0xb9c0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb9c0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:WindowsPrefetch
lea rcx, [rbp + 0xb9e0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xb9e0]
call fcn.140001a58
lea rdx, str._del__s__f__a:h___a_:_a___q_F:Usersusername_AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewy.
lea rcx, [rbp + 0xba00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xba00]
call fcn.140001a58
lea rdx, str._del__s__f__a:h___a_:_a___q_F:Users_username_AppDataLocalMicrosoftWindowsWebCache.
lea rcx, [rbp + 0xba20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xba20]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweAC
lea rcx, [rbp + 0xba40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xba40]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweLocalCache
lea rcx, [rbp + 0xba60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xba60]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings
lea rcx, [rbp + 0xba80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xba80]
call fcn.140001a58
lea rdx, str.rmdir__s__q__F:Program_FilesEpic_GamesFortniteEnginePlugins
lea rcx, [rbp + 0xbaa0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbaa0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__F:Program_FilesEpic_GamesFortniteFortniteGamePlugins
lea rcx, [rbp + 0xbac0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbac0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__F:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDir
lea rcx, [rbp + 0xbae0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbae0]
call fcn.140001a58
lea rdx, str.rmdir__s__q__F:Program_FilesEpic_GamesFortniteFortniteGameConfig
lea rcx, [rbp + 0xbb00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbb00]
call fcn.140001a58
lea rdx, str.rmdir__s__q__F:Users_username_AppDataLocalNVIDIA_Corporation
lea rcx, [rbp + 0xbb20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbb20]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataRoamingEasyAntiCheat
lea rcx, [rbp + 0xbb40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbb40]
call fcn.140001a58
lea rdx, str.del__f__s__q_F:ProgramDataMicrosoftDataMartPaidWiFiNetworksCache
lea rcx, [rbp + 0xbb60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbb60]
call fcn.140001a58
lea rdx, str.del__f__s__q_F:ProgramDataMicrosoftDataMartPaidWiFiRules
lea rcx, [rbp + 0xbb80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbb80]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:WindowsServiceProfilesNetworkServiceAppDataLocalMicrosoftWindowsDeliveryOptimizationCache
lea rcx, [rbp + 0xbba0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbba0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalTemp
lea rcx, [rbp + 0xbbc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbbc0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalMicrosoftWindowsINetCache
lea rcx, [rbp + 0xbbe0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbbe0]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalMicrosoftWindowsINetCookies
lea rcx, [rbp + 0xbc00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbc00]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_AppDataLocalMicrosoftWindowsHistory
lea rcx, [rbp + 0xbc20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbc20]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:Users_username_Intel
lea rcx, [rbp + 0xbc40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbc40]
call fcn.140001a58
lea rdx, str.rmdir__s__q_F:WindowsSystem32config_systemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheMetaData
lea rcx, [rbp + 0xbc60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbc60]
call fcn.140001a58
lea rdx, str.rmdir__s__q__F:Users_username_AppDataLocalMicrosoftFeeds_Cache
lea rcx, [rbp + 0xbc80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbc80]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchCEPHTMLENGINE.EXE_E15640BA.pf
lea rcx, [rbp + 0xbca0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbca0]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchCMD.EXE_0BD30981.pf
lea rcx, [rbp + 0xbcc0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbcc0]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchCLIPUP.EXE_4C5C7B66.pf
lea rcx, [rbp + 0xbce0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbce0]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchD3D9TEST.EXE_1B86F3FC.pf
lea rcx, [rbp + 0xbd00]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbd00]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchGET_GRAPHICS_OFFSETS64.EXE_2BCB2EA4.pf
lea rcx, [rbp + 0xbd20]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbd20]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchGET_GRAPHICS_OFFSETS32.EXE_D4C865E3.pf
lea rcx, [rbp + 0xbd40]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbd40]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchOBS_FFMPEG_MUX.EXE_1C01271A.pf
lea rcx, [rbp + 0xbd60]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbd60]
call fcn.140001a58
lea rdx, str.del_C:WindowsprefetchOBS_FFMPEG_MUX.EXE_1C01271A.pf
lea rcx, [rbp + 0xbd80]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbd80]
call fcn.140001a58
lea rdx, str.vssadmin_delete_shadows__All__Quiet
lea rcx, [rbp + 0xbda0]
call fcn.140006240
mov rcx, rax
call fcn.140001a48
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xbda0]
call fcn.140001a58
mov rax, qword [rbx]
mov byte [rax + 0xb2], 1
mov rax, qword [rbx]
mov byte [rax + 0xb1], 0
mov byte [0x1401c0968], 0
mov rbx, qword [rsp + 0xbed0]
add rsp, 0xbec0
pop rbp
ret